admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-0163.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

914 B
Raw Blame History

CVE-2022-0163

Description

The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any authenticated users, such as subscriber, to download arbitrary form's data, which could include sensitive information such as PII depending on the form.

POC

Reference

Github

No PoCs found on GitHub currently.