CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Gallery by 10Web: from n/a through 1.8.15.
Explanation of Vulnerability in Simple Terms
Photo Gallery by 10Web versions up to 1.8.15 lack proper authorization checks, allowing authenticated users to modify gallery content they should not have access to. An attacker with a low-privilege account can alter gallery data through the plugin's interface. The vulnerability affects the plugin's access control logic and does not expose sensitive data or cause service disruption.
What an attacker can do
Modify gallery content or settings that should be restricted to higher-privilege users.
Potential impact on your site
Unauthorized users can alter or deface gallery content, potentially affecting site integrity and user trust.
Conditions required to exploit
Attacker must have a low-privilege user account on the site (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
