Login as User or Customer < 3.3 - Privilege Escalation
The plugin lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session.
login_as_user_or_customerPoC 已收录
CVSS9.8EPSS 89.0%