Entityform Block
1 CVEs
product
Monthly
The Entityform Block module 7.x-1.x before 7.x-1.3 for Drupal does not properly check permissions when a form is locked to a role, which allows remote attackers to obtain access to certain. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.
Privilege Escalation
Entityform Block
NVD
CVSS 2.0
5.0
EPSS
0.2%
EPSS 0%
CVSS 5.0
MEDIUM
PATCH
This Month
The Entityform Block module 7.x-1.x before 7.x-1.3 for Drupal does not properly check permissions when a form is locked to a role, which allows remote attackers to obtain access to certain. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.
Privilege Escalation
Entityform Block
NVD