Lussumo Vanilla 1.1.3 and previous versions does not require admin privileges for (1) ajax/sortcategories.php and (2) ajax/sortroles.php, which allows remote malicious users to conduct unauthorized sort operations and other activities.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
lussumo vanilla |