CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in GS Plugins GS Pins for Pinterest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Pins for Pinterest: from n/a through 1.6.7.
Explanation of Vulnerability in Simple Terms
GS Pins for Pinterest versions up to 1.6.7 lack proper authorization checks, allowing authenticated users to modify or delete data they should not have access to. An attacker with a low-privilege account can alter site content or disrupt functionality. The vulnerability requires login but does not require user interaction beyond normal site access.
What an attacker can do
Modify or delete Pinterest pin data without proper permission checks.
Potential impact on your site
Authenticated users can tamper with or remove pin content, potentially disrupting your Pinterest integration.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
