LazyCoders LLC LazyTasks Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the LazyTasks project task management plugin by LazyCoders LLC, affecting versions through 1.4.01. This vulnerability allows low-privileged users to escalate their privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to gain higher privileges, with the potential to take full control of the website.

Remediation

Users are advised to update to a version later than 1.4.01. Patchstack has issued a mitigation rule to block attacks until an official fix is available.