critical9.8
CVE-2023-28698
Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check.
Impact
Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wddgroup | Fantsy | Version 2.1.8 |