Description
The lacks CSRF checks allowing a user to invite any user to any group (including private groups)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Himer | < 2.1.3 | 2.1.3 |
References
- https://wpscan.com/vulnerability/a2df28d3-bf03-4fd3-b231-86e062739899/ exploit vdb-entry technical-description