← CVE Intelligence

CVE-2021-24800

DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR PUBLISHED

Description (CNA)

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.

Affected (CNA)

Vendor / productVersions
Unknown / DW Question Answer Proaffected 1.3.4 through 1.3.4

CWE

CWE-639

References

ADP enrichment

CVE

No English description supplied.