| Package | Affected versions | Patched versions |
|---|---|---|
| candidats | = 3.0.0 |
CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free