CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Wiser Notify WiserNotify Social Proof allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WiserNotify Social Proof: from n/a through 2.5.
Explanation of Vulnerability in Simple Terms
WiserNotify Social Proof versions 2.5 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify data through the application. The vulnerability requires no user interaction and can be exploited over the network. Site administrators should update to a version newer than 2.5 to remediate this issue.
What an attacker can do
Modify application data without authentication or permission.
Potential impact on your site
Unauthorized users can alter data in WiserNotify Social Proof, potentially affecting social proof displays and customer trust.
Conditions required to exploit
Network access to the affected application; no authentication required.
Key dates
External resources
Related vulnerabilities
