| Package | Affected versions | Patched versions |
|---|---|---|
| elog | ≤ 3.1.5-20251014 |
ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the target account. By default, ELOG is not configured to allow self-registration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free