CVE

CVE-2021-24800

CVE-2021-24800

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.

Source: CVE-2021-24800

Exit mobile version