CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost Calculator Builder: from n/a through 3.1.42.
Explanation of Vulnerability in Simple Terms
Cost Calculator Builder through version 3.1.42 lacks proper authorization checks, allowing authenticated users to modify or delete data they should not have access to. An attacker with low-level site access can alter calculator settings or disable functionality. The vulnerability affects integrity and availability but not confidentiality. Update to a version newer than 3.1.42.
What an attacker can do
Modify or delete calculator data and settings without proper permission checks.
Potential impact on your site
Authenticated users can tamper with cost calculator configurations, potentially breaking functionality or altering pricing data.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
