Threats tagged 'ghsa-wmcw-j3p9-c62j'

The Advanced Custom Fields (ACF) extension for Joomla, versions 2.8.13-2.8.15, 3.1.4-3.1.8, and Smile Pack versions 1.2.7-1.2.9, 2.1.2-2.1.6, contains an improper access control vulnerability. This flaw allows unauthenticated users to delete images in Gallery folders, including those used in published articles and modules. Additionally, in ACF versions 3.1.7 and 3.1.8, users could view, remove, or save other users' unsaved uploads without authentication.