CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.73.
Explanation of Vulnerability in Simple Terms
The 10Web Map Builder for Google Maps plugin through version 1.0.73 lacks proper authorization checks on certain operations. An authenticated user with low privileges can modify or delete map data without proper permission validation. The vulnerability affects integrity and availability of map content but does not expose sensitive information.
What an attacker can do
Modify or delete map data without proper authorization.
Potential impact on your site
Users with low privileges can alter or remove maps created by others, disrupting map functionality and content.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
