Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24800

DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown DW Question Answer Pro

  • 1.3.4 to ≤ 1.3.4affected

References