Threats tagged 'ghsa-5462-5vm9-jmvr'

Plausible Analytics versions up to 3.2.1 have a mass assignment vulnerability in the update_traffic_change_notification function. Authenticated site editors can exploit this flaw by supplying a site_id parameter to reassign traffic change notifications to another site. This allows them to receive traffic alerts and visitor data for sites they do not own or manage.