CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Suresh Chand CHP Ads Block Detector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CHP Ads Block Detector: from n/a through 3.9.5.
Explanation of Vulnerability in Simple Terms
CHP Ads Block Detector through version 3.9.5 lacks proper authorization checks, allowing authenticated users with low privileges to modify site settings and data. An attacker with a basic user account can alter integrity-sensitive configurations without proper permission validation. The vulnerability requires valid login credentials but does not require administrator access.
What an attacker can do
Modify site settings and data without proper authorization as a low-privilege authenticated user.
Potential impact on your site
Unauthorized users can alter site configurations and data, potentially disrupting site functionality or modifying content.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
