Beveiligingsadvies

CVE-2023-0291

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-06-09 05:33:19

Laatst bijgewerkt 2026-04-08 16:58:23

Toegewezen door Wordfence

CVSS-score 7.2

Status PUBLISHED

Beschrijving

The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated with the qsm_remove_file_fd_question AJAX action in versions up to, and including, 8.0.8. This makes it possible for unauthenticated attackers to delete arbitrary media files.

← Alle CVE's bekijken Bekijk op cve.org ↗