critical9.8
CVE-2021-41694
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.
Impact
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Globaldatingsoftware | Premiumdatingscript | Version 4.2.7.7 |