Описание
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low as Contributor.
EPSS
Процентиль: 9%
0.00033
Низкий
2.7 Low
CVSS3
Дефекты
CWE-639
Связанные уязвимости
CVSS3: 2.7
github
2 месяца назад
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low as Contributor.
EPSS
Процентиль: 9%
0.00033
Низкий
2.7 Low
CVSS3
Дефекты
CWE-639