Lucene search
PRIOn knowledge basePRION:CVE-2021-4383HistoryJun 07, 2023 - 2:15 a.m.
Design/Logic Flaw
2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
5
vulnerability
wp quick frontend editor
page content injection
capability checks
low-authenticated attackers
wordpress
The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to page content injection in versions up to, and including, 5.5. This is due to missing capability checks in the plugin’s page-editing functionality. This makes it possible for low-authenticated attackers, such as subscribers, to edit/create any page or post on the blog.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_quick_frontend_editor | le | 5.5 |
Related
cvelist
cvelist
CVE-2021-4383
2023-06-07 01:51:52
cve
cve
CVE-2021-4383
2023-06-07 02:15:15
nvd
nvd
CVE-2021-4383
2023-06-07 02:15:15