VWE-2022-6469 Printable Version

Common Name	None
VWE-ID	VWE-2022-6469
Related Report	None
Severity	LOW
Exploit Difficulty	EASY
Platform	Affects all platforms supported by the vulnerable versions.
Description	Permissions Escalation. When the WIDGET BB-Code's Maximum Items in Widget Output is less than the default number for a variant, some variants may render the default number anyway when the count parameter is unspecified. Does not affect Lite versions.
Discovered	September 18, 2022
Resolved	October 6, 2022
Patches Available	4.1.5 Patch Level 3 4.1.4 Patch Level 5 4.1.3 Patch Level 7

The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.