CVE-2021-24800

Publication date

2022-04-25 15:50:41

Family

WPScan

State

PUBLISHED

Description

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.