Security Advisory
CVE-2018-20424
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.