In Beaver Themer, attackers can bypass conditional logic...
Moderate severity
Unreviewed
Published
Jan 11, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Jan 10, 2022
Published to the GitHub Advisory Database
Jan 11, 2022
Last updated
Feb 3, 2023
In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives. Exploitation requires that a Themer layout is applied to the archives, and that the post excerpt field is not set.
References