PT-2025-11470
CVE-2025-2202
·
Published
2025-03-17
·
Updated
2025-03-17
Description by
CVSS 4.0
6.9
MediumMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Innovación y Cualificación Local Administration Plugin (affected versions not specified)
Description
The issue is related to a broken access control vulnerability in the Innovación y Cualificación local administration plugin, specifically in the ajax.php file. This vulnerability allows an attacker to obtain sensitive information about other users, including their id, name, login, and email.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾