4.3
Medium
CVE-2023-38475 Missing Authorization vulnerability in RedNao Donations Made Easy – Smart Donations allows Exploiting Incorrectly…
Description
Missing Authorization vulnerability in RedNao Donations Made Easy – Smart Donations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Donations Made Easy – Smart Donations 4.0 | earliest → 4.0.12 | No fix stated |
Other CVEs of Donations Made Easy – Smart Donations
The 6 CVEs of Donations Made Easy – Smart Donations →
CVE-2023-47551
Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations.This issue affects…
5.4
Medium
CVE-2023-47550
Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations allows Stored XSS.This…
7.1
High
CVE-2023-40207
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedNao Donations…
7.6
High
CVE-2023-40664
Unauth
7.1
High