CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through 5.5.4.
Explanation of Vulnerability in Simple Terms
Formidable Forms versions up to 5.5.4 lack proper authorization checks, allowing an attacker to modify form data or settings without proper permissions. The vulnerability requires user interaction—typically clicking a malicious link—but does not require authentication. The impact is limited to data integrity; no data disclosure or service disruption occurs.
What an attacker can do
Modify form data or settings without authorization.
Potential impact on your site
Form submissions or configurations could be altered by unauthorized users.
Conditions required to exploit
Victim must click a malicious link or visit an attacker-controlled page.
Key dates
External resources
Related vulnerabilities
