MDJM Mobile DJ Manager Privilege Escalation Vulnerability

A missing authorization vulnerability in MDJM Mobile DJ Manager versions through 1.7.6 allows for privilege escalation by exploiting improperly configured access control security levels. This could enable a user with low privileges to gain higher privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a user to escalate their privileges, gaining access to higher-level permissions and control over the website.

Remediation

Users are advised to update to a version of MDJM Mobile DJ Manager later than 1.7.6. For those using WordPress, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.