ContentStudio, 20240841e90f9b464c817203ad811fa2abd8fe54

CVE, Research URL: 20240841e90f9b464c817203ad811fa2abd8fe54
Home page URL: Security reports for ContentStudio
Application: ContentStudio
Published on: Dec 07, 2022
Research Description: ContentStudio [contentstudio] < 1.1.9 ContentStudio <= 1.1.8 - Missing Authorization The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the cstu_set_token functions in versions up to, and including, 1.1.8. This makes it possible for unauthenticated attackers to set the plugin's API token (via cstu_set_token), which allows further actions such as creating posts.
Affected versions: Min -, max 1.1.9.
Status: vulnerable