CVE-2021-24800 — DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR
The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comme…
Published: 2022-04-25 · CVSS: Unscored
The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7