CVE-2021-24800

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:designwall:dw_question_\&_answer:*:*:*:*:pro:wordpress:*:*

Information

Published : 2022-04-25 09:16

Updated : 2022-05-05 05:00


NVD link : CVE-2021-24800

Mitre link : CVE-2021-24800


JSON object : View

CWE
CWE-639

Authorization Bypass Through User-Controlled Key

Advertisement

dedicated server usa

Products Affected

designwall

  • dw_question_\&_answer