Threats tagged 'ghsa-7fpw-9995-5q93'

An authorization bypass vulnerability exists in CrocoBlock JetFormBuilder – Hierarchical Select plugin versions up to 1.0.10. The flaw arises from incorrectly configured access control security levels, allowing an attacker to bypass authorization checks by manipulating a user-controlled key. This vulnerability has a medium severity rating with a CVSS score of 5.3.