Beveiligingsadvies

CVE-2021-24318

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-06-01 11:33:30

Laatst bijgewerkt 2024-08-03 19:28:23

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Listeo WordPress theme before 1.6.11 did not ensure that the Post/Page and Booking to delete belong to the user making the request, allowing any authenticated users to delete arbitrary page/post and booking via an IDOR vector.

← Alle CVE's bekijken Bekijk op cve.org ↗