Description
Insecure permissions in the AdminController.AjaxSave() method of PPGo_Jobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information.
Medium · 6.3
CVE-2024-36691
EUVD-2024-36190GHSA-68j3-86cc-wp27
Insecure permissions in the AdminController.AjaxSave() method of PPGo_Jobs v2.8.0 allows authenticated attackers to arbitrarily modify user…
Published Jun 12, 2024 · Updated Aug 21, 2024 · Assigned by mitre