Lucene search
PRIOn knowledge basePRION:CVE-2020-36712HistoryJun 07, 2023 - 2:15 a.m.
Design/Logic Flaw
2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
1
kali forms plugin
wordpress
unauthenticated
arbitrary post deletion
privilege
user protections
The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 2.1.1. This is due to the kaliforms_form_delete_uploaded_file function lacking any privilege or user protections. This makes it possible for unauthenticated attackers to delete any site post or page with the id parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kali_forms | le | 2.1.1 |
Related
cvelist
cvelist
CVE-2020-36712
2023-06-07 01:51:31
cve
cve
CVE-2020-36712
2023-06-07 02:15:11
nvd
nvd
CVE-2020-36712
2023-06-07 02:15:11