CVEs-PoC/2021/CVE-2021-20866.md

CVE-2021-20866

Description

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in obtaining the user list which may allow a user to obtain the unauthorized information via unspecified vectors.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates