PT-2026-25806

Name of the Vulnerable Software and Affected Versions Craft CMS versions 4.0.0-RC1 through 4.17.5 Craft CMS versions 5.0.0-RC1 through 5.9.11 Description Craft CMS contains a flaw in the UsersController-actionImpersonateWithToken function that allows a low-privilege user, or an unauthenticated us...