Threats tagged 'ghsa-xc2m-hmp7-hc44'

ZwiiCMS up to version 13.6.07 contains an Incorrect Access Control vulnerability in its user management component. This flaw allows a remote, authenticated attacker with low privileges to escalate their privileges by sending a specially crafted HTTP request. The attacker can access and modify profile data of any user, including administrators.