Authorization Vulnerability in CP Multi View Event Calendar Allows Functionality Misuse

CVE-2023-28492

What is CVE-2023-28492?

The CodePeople CP Multi View Event Calendar has a vulnerability that arises from missing authorization checks. This flaw enables malicious actors to exploit the system, leading to potential misuse of functionalities. Specifically, the vulnerability allows unauthorized users to submit feedback through the calendar, posing risks of spam or malicious content input. The affected versions span from an unspecified release up to 1.4.10, highlighting the importance of updating to mitigate such issues.

References