CVE-2018-20424

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.

Score

CVSS 3.0 5.9 Medium

Status

Modified - cve@mitre.org

Published

2018-12-24

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Discuzx (Comsenz)

References

• https://gitee.com/ComsenzDiscuz/DiscuzX/issues/IPRUI