The Easy Student Results WordPress plugin up to and including 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
easy student results project easy student results |
Vulmon