CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Magazine3 Easy Table of Contents allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Table of Contents: from n/a through 2.0.45.2.
Explanation of Vulnerability in Simple Terms
Easy Table of Contents versions up to 2.0.45.2 lack proper authorization checks, allowing authenticated users to modify site content and settings they should not have access to. An attacker with a low-privilege account can alter data integrity and availability without elevated permissions. Update to a version newer than 2.0.45.2 to resolve this issue.
What an attacker can do
Modify site content and settings with a low-privilege user account.
Potential impact on your site
Unauthorized users can alter table of contents settings and potentially corrupt site content.
Conditions required to exploit
Attacker must have a valid user account with low-level permissions on the site.
Key dates
External resources
Related vulnerabilities
