JVN#34980730: A-Form vulnerable in restricting access

A-Form is a plug-in for Movable Type that adds mail forms and survey forms. A-Form contains a vulnerability in restricting access permissions.

Impact

Information managed by A-Form may be altered by a user who does not have administrative privileges.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Apply a patch
Apply the appropriate patch according to the information provided by the developer.

Products Affected

• A-Form PC 3.0 and earlier
• A-Form PC/Mobile 3.0 and earlier
• A-Form 1.3.5 and earlier
• A-Form bamboo 1.3.5 and earlier
• A-Form 2.0.2 and earlier
• A-Form bamboo 2.0.2 and earlier