Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the editComment process of the comments API. An attacker can overwrite arbitrary pages or comments by sending crafted POST requests to the api/comments endpoint with a chosen pagetag...