Description
Cross-Site Request Forgery (CSRF) vulnerability in SwiftyEdit Content Management System prior to v1.2.0, allows remote attackers to escalate privileges via the user password update functionality.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | swiftyedit/swiftyedit | < 1.2.0 | 1.2.0 | GHSA-2492-xxqf-6h78 |