Codidact QPixel Suggested Edit Visibility Vulnerability in Private Categories

A vulnerability exists in Codidact QPixel, a community knowledge-sharing software, where suggested edits in private or limited-visibility categories can be accessed by unprivileged or anonymous users through the suggested edit queue. This issue affects all versions of QPixel and has not been patched yet. Users are advised not to rely on private categories for sensitive information.

Impact

This vulnerability allows unprivileged or anonymous users to view suggested edits in private or limited-visibility categories, potentially exposing sensitive information or editorial changes that should remain confidential.