CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Iulia Cazan Image Regenerate & Select Crop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Regenerate & Select Crop: from n/a through 7.1.0.
Explanation of Vulnerability in Simple Terms
Image Regenerate & Select Crop through version 7.1.0 fails to properly check user permissions before allowing certain actions. A logged-in user with low privileges can modify or delete image data without authorization. The vulnerability requires an active user account but no special interaction from the victim.
What an attacker can do
Modify or delete image data on the site without proper authorization.
Potential impact on your site
Unauthorized users can corrupt or remove images, potentially disrupting site content and user experience.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
