CVE-2021-24781

CVE-2021-24781: Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value Change

Vendor Unknown
Product Image Source Control
Weakness CWE-284
Published November 1, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Image Source Control WordPress plugin before 2.3.1 allows users with a role as low as Contributor to change arbitrary post meta fields of arbitrary posts (even those they should not be able to edit)

Key dates

02Disclosure timeline

November 1, 2021 CVE published
August 3, 2024 Record updated