Name of the Vulnerable Software and Affected Versions wagtail-2fa versions prior to 1.3.0

Description The issue allows an attacker to bypass the 2-factor authentication (2FA) check in the Wagtail CMS by manipulating the URL, potentially gaining full access to the system if they have obtained a user's login credentials. This can be exploited to add a new device to the account, further compromising security.

Recommendations For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the issue.