PT-2026-90965 · Undefined · Undefined
CVSS v3.1
7.5
عالية
| المتجه | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
MDJM Event Management versions prior to 1.7.8.5
Mobile Events Manager versions prior to 1.4.8.4
Description
Insufficient validation of capabilities, nonces, and record types during playlist entry removal allows unauthenticated attackers to permanently delete arbitrary posts, pages, and media attachments, bypassing the trash mechanism.
Recommendations
Update MDJM Event Management to version 1.7.8.5 or later.
Update Mobile Events Manager to version 1.4.8.4 or later.
استغلال
إصلاح
Missing Authorization
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Undefined