CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Apollo13Themes Apollo13 Framework Extensions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Apollo13 Framework Extensions: from n/a through 1.8.10.
Explanation of Vulnerability in Simple Terms
Apollo13 Framework Extensions versions 1.8.10 and earlier lack proper authorization checks, allowing authenticated users to modify or disable site functionality. An attacker with low-level account access can alter settings or data without proper permission validation. Update to a version newer than 1.8.10 to resolve this issue.
What an attacker can do
Modify or disable site functionality without proper authorization.
Potential impact on your site
Authenticated users can alter settings or data they shouldn't have access to.
Conditions required to exploit
Attacker must have a low-privilege account on the site.
Key dates
External resources
Related vulnerabilities
