CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in RedNao Donations Made Easy – Smart Donations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
Explanation of Vulnerability in Simple Terms
Donations Made Easy – Smart Donations through version 4.0.12 lacks proper authorization checks on certain functions. A logged-in user with low privileges can modify donation settings or data without proper permission validation. The vulnerability does not expose sensitive information or cause service disruption, but allows unauthorized changes to donation-related configuration.
What an attacker can do
Modify donation settings or records without proper authorization.
Potential impact on your site
Donation configuration or records may be altered by unauthorized users with site access.
Conditions required to exploit
Attacker must have a low-privilege account on the site.
Key dates
External resources
Related vulnerabilities
