WordPress Modern Events Calendar Lite <5.16.5 -敏感信息披露(CVE-2021-24146)

2022-10-12 WordPress PoC No

Description

5.16.5之前的WordPress Modern Events CalendarLite没有适当地限制对导出文件的访问，允许未经身份验证的用户以CSV或XML格式导出所有事件数据

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities