CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.5.3.
Explanation of Vulnerability in Simple Terms
The Barcode Scanner with Inventory & Order Manager plugin fails to properly check user permissions before allowing access to sensitive functions. An attacker can trick a site user into visiting a malicious link, which then performs unauthorized actions on the site. The vulnerability affects all versions up to 1.5.3 and impacts confidentiality, integrity, and availability of the site.
What an attacker can do
Perform unauthorized actions on the site by tricking a user into clicking a malicious link.
Potential impact on your site
Unauthorized changes to inventory, orders, or other plugin data; potential data exposure or site disruption.
Conditions required to exploit
The attacker must trick a site user into visiting a malicious link or page (user interaction required).
Key dates
External resources
Related vulnerabilities
