medium5.9
CVE-2018-20424
Discuz!
Impact
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comsenz | Discuzx | Version x3.4 |