CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bold Timeline Lite: from n/a through <= 1.1.9.
Explanation of Vulnerability in Simple Terms
Bold Timeline Lite versions up to 1.1.9 lack proper authorization checks, allowing authenticated users to modify timeline data they should not have access to. An attacker with a low-privilege account can alter or create timeline entries without proper permission validation. The vulnerability affects the plugin's core functionality and requires an active user account to exploit.
What an attacker can do
Modify or create timeline entries without proper authorization checks.
Potential impact on your site
Unauthorized users can alter timeline content, compromising data integrity and site credibility.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
