CVE-2007-5374: Lightblog

Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days.

cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.

Affected products

Published 2007-10-11. Last modified 2026-06-16.