The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/cd37ca81-d683-4955-bc97-60204cb9c346 | Exploit Third Party Advisory |
Configurations
Information
Published : 2022-04-25 09:16
Updated : 2022-05-05 05:00
NVD link : CVE-2021-24800
Mitre link : CVE-2021-24800
JSON object : View
CWE
CWE-639
Authorization Bypass Through User-Controlled Key
Products Affected
designwall
- dw_question_\&_answer