Permalink
CVE-2023-38383
5.4 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): NONE
- Integrity impact (I): LOW
- Availability impact (A): LOW
WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Language: from n/a through 1.2.1.
References
Affected products
wordpress-language
- =<1.2.1
Matching in nixpkgs
pkgs.wordpressPackages.languages.de_DE
None
-
nixos-unstable -
- nixpkgs-unstable 6.6
pkgs.wordpressPackages.languages.fr_FR
None
-
nixos-unstable -
- nixpkgs-unstable 6.6
pkgs.wordpressPackages.languages.ro_RO
None
-
nixos-unstable -
- nixpkgs-unstable 6.6
pkgs.wordpressPackages.languages.ru_RU
None
-
nixos-unstable -
- nixpkgs-unstable 6.6