CVE-2021-24238

CVE-2021-24238

The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not ensure that the requested property to be deleted belong to the user making the request, allowing any authenticated users to delete arbitrary properties by tampering with the property_id parameter.

Source: CVE-2021-24238

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다