CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control luckywp-scripts-control allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LuckyWP Scripts Control: from n/a through <= 1.2.1.
Explanation of Vulnerability in Simple Terms
LuckyWP Scripts Control versions 1.2.1 and earlier lack proper authorization checks on certain functions. A logged-in user with low privileges can modify script settings they should not have access to. The vulnerability does not expose sensitive data or cause service disruption, but allows unauthorized changes to site configuration.
What an attacker can do
Modify script settings without proper authorization.
Potential impact on your site
Unauthorized users can alter script control settings, potentially affecting site functionality or injecting unwanted scripts.
Conditions required to exploit
Attacker must be logged in with a low-privilege account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
