CVE-2023-5352: Awesome Support < 6.1.5 - Insufficient permission check in wpas_edit_reply
Published Nov 6, 2023
·Updated
The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpaseditreply function, allowing users to edit posts for which they do not have permission.
Affected Software
1 affected component
Getawesomesupport Awesome Support Wordpress<6.1.5
Event History
Nov 6, 2023
CVE Published
via MITRE·08:40 PM
Data Sourced
via MITRE·08:40 PM
DescriptionWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-5352?
CVE-2023-5352 is a vulnerability in the Awesome Support WordPress plugin that allows users to edit posts without proper permission.
2
What is the severity of CVE-2023-5352?
The severity of CVE-2023-5352 is medium with a CVSS score of 4.3.
3
How does CVE-2023-5352 affect the Awesome Support plugin?
CVE-2023-5352 affects the Awesome Support plugin version up to 6.1.5.
4
What is the CWE ID for CVE-2023-5352?
The CWE ID for CVE-2023-5352 is CWE-284 and CWE-863.
5
How can I fix the CVE-2023-5352 vulnerability?
To fix the CVE-2023-5352 vulnerability, update the Awesome Support plugin to version 6.1.5 or later.