CVE-2021-20867

2021-12-1306:40:16

jpcert

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.0%

JSON

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in moving the field group which may allow a user to move the unauthorized field group via unspecified vectors.

CNA Affected

[
  {
    "product": "Advanced Custom Fields and Advanced Custom Fields Pro",
    "vendor": "Delicious Brains",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 5.11"
      }
    ]
  }
]