CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10.
Explanation of Vulnerability in Simple Terms
The MP3 Audio Player for Music, Radio & Podcast by Sonaar does not properly check user permissions before allowing certain actions. A logged-in user with low privileges can modify or disable site features they should not have access to. The vulnerability affects versions up to 4.10.
What an attacker can do
A logged-in user can modify or disable site features without proper authorization.
Potential impact on your site
Unauthorized users can alter audio player settings or disable playback features affecting site visitors.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
