CVE-2021-24781CWE-284

Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value Change

published November 1, 2021

CVSS
—
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

The Image Source Control WordPress plugin before 2.3.1 allows users with a role as low as Contributor to change arbitrary post meta fields of arbitrary posts (even those they should not be able to edit)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00793 · 56.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-11-01T08:46Z
EPSS history
Timeline
  • 01 NOV 08:46Z
    Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value Change
    cvelistv5