cleantalk
Vulnerabilities and Security Researches

Student Result or Employee Database, af2fead6-9f8e-4c00-ac50-440de969ca42

Published on
-
Research Description
Student Result or Employee Database [simple-student-result] < 1.7.5 Student Result or Employee Database &lt; 1.8.0 - Unauthorised REST Calls The plugin has a flawed permission callback in its REST endpoints, allowing unauthenticated attackers to call them and add/edit/delete arbitrary student for example
Affected versions
max 1.7.5.
Status
vulnerable