| Package | Affected versions | Patched versions |
|---|---|---|
| gibbon | ≤ 26.0.00 |
Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free