Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xvc2-6386-99x8

Опубликовано: 20 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.

The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.

EPSS

Процентиль: 16%
0.00052
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.4
nvd
около 2 лет назад

The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.

EPSS

Процентиль: 16%
0.00052
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-863