medium6.5

CVE-2024-31118

Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This i…

Impact

Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Project & Document Manager: from n/a through 4.70.

Affected products

Product	Affected versions
SP Project & Document Manager: From N/A	through 4.70.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-862

References

NVD record
CVE.org record
https://patchstack.com/database/wordpress/plugin/sp-client-document-manager/vulnerability/wordpress-sp-project-document-manager-plugin-4-70-broken-access-control-to-xss-vulnerability?_s_id=cve