studiocms vulnerabilities (npm)
7 vulnerabilities.
-
studiocmsnpm StudioCMS REST getUsers Exposes Owner Account Records to Admin Tokens 2.7 Low -
studiocmsnpm StudioCMS: IDOR in User Notification Preferences Allows Any Authenticated User to Modify Any User's Settings 5.4 Medium -
studiocmsnpm StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts 4.7 Medium -
studiocmsnpm StudioCMS: IDOR — Admin-to-Owner Account Takeover via Password Reset Link Generation 6.8 Medium -
studiocmsnpm StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service 7.1 High -
studiocmsnpm StudioCMS Affected by Privilege Escalation via Insecure API Token Generation 8.8 High -
studiocmsnpm StudioCMS has an Authorization Bypass Through User-Controlled Key 6.5 Medium