[wp-trac] [WordPress Trac] #16129: Incorrect cap check in wp-admin/includes/comment.php : edit_comment()
WordPress Trac
wp-trac at lists.automattic.com
Thu Jan 6 22:22:59 UTC 2011
#16129: Incorrect cap check in wp-admin/includes/comment.php : edit_comment()
----------------------------+-----------------
Reporter: westi | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.1
Component: Administration | Version: 3.1
Severity: normal | Keywords:
----------------------------+-----------------
Checks current_user_can( 'edit_post', $comment_post_ID )
But should be current_user_can( 'edit_comment', (int) $_POST['comment_ID']
)
--
Ticket URL: <http://core.trac.wordpress.org/ticket/16129>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list