Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wvm9-mq8w-wrm8

Опубликовано: 20 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the voteOnComment function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated attackers to increase or decrease the rating of a comment.

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the voteOnComment function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated attackers to increase or decrease the rating of a comment.

EPSS

Процентиль: 45%
0.00221
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-639
CWE-862

Связанные уязвимости

CVSS3: 5.3
nvd
больше 2 лет назад

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the voteOnComment function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated attackers to increase or decrease the rating of a comment.

EPSS

Процентиль: 45%
0.00221
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-639
CWE-862