Description
The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the request
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | buddyboss-platform | < 2.6.0 | 2.6.0 |
References
- https://wpscan.com/vulnerability/76e8591f-120c-4cd7-b9a2-79f8d4d98aa8/ exploit vdb-entry technical-description