Skip to content
Threat Feed
Subscribe

Product

Payload-Alt-Text-Plugin (< 0.7.1)

1 brief RSS
high threat

Authorization Bypass in @jhb.software/payload-alt-text-plugin

The @jhb.software/payload-alt-text-plugin v0.7.0 fails to restrict Payload Local API calls, allowing authenticated users to bypass collection-level access controls to read and modify document data.

exploited payload-alt-text-plugin authorization-bypass cms-plugin cwe-863
2t