CVE-2021-24800
25.04.2022, 16:16
The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.Enginsight
| Vendor | Product | Version |
|---|---|---|
| designwall | dw_question_\&_answer | 𝑥 ≤ 1.3.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration