CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through 1.10.19.
Explanation of Vulnerability in Simple Terms
Popup by Supsystic versions up to 1.10.19 lack proper authorization checks, allowing unauthenticated attackers to modify popup content and settings. An attacker can send a network request to alter popups without needing to log in or interact with a site user. This affects the integrity of popup data but does not expose sensitive information or take the site offline.
What an attacker can do
Modify popup content and settings without authentication.
Potential impact on your site
Popups may display altered or malicious content to your visitors without your knowledge.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
