| Package | Affected versions | Patched versions |
|---|---|---|
| zwiicms | ≤ 13.6.07 |
An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user, including administrators.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free