{ "schema_version": "1.4.0", "id": "GHSA-jr25-57j4-8x4x", "modified": "2022-05-24T19:19:19Z", "published": "2022-05-24T19:19:19Z", "aliases": [ "CVE-2021-24781" ], "details": "The Image Source Control WordPress plugin before 2.3.1 allows users with a role as low as Contributor to change arbitrary post meta fields of arbitrary posts (even those they should not be able to edit)", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24781" }, { "type": "WEB", "url": "https://plugins.trac.wordpress.org/changeset/2606615" }, { "type": "WEB", "url": "https://wpscan.com/vulnerability/3550ba54-7786-4ad9-aeb1-1c0750f189d0" } ], "database_specific": { "cwe_ids": [ "CWE-284" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2021-11-01T09:15:00Z" } }