Authorization Vulnerability in CP Multi View Event Calendar Affects Incorrectly Configured Access Control Security Levels

CVE-2023-23814

Summary

A missing authorization vulnerability has been identified in the CodePeople CP Multi View Event Calendar. This vulnerability arises from incorrectly configured access control security levels, leading to potential unauthorized access to sensitive features and data within the event calendar. The flaw affects all versions of the plugin from an unspecified version through 1.4.13, enabling attackers to exploit access controls and manipulate event data. Users of this plugin are advised to assess their current configuration and apply recommended security measures to mitigate any potential risks.

References