Design/Logic Flaw

The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...