CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a through 4.1.4.0
Explanation of Vulnerability in Simple Terms
Uncanny Toolkit Pro for LearnDash versions up to 4.1.4.0 lack proper authorization checks, allowing authenticated users with low privileges to modify or delete content they should not have access to. The vulnerability does not expose sensitive data but can degrade site integrity and availability. Update to a version newer than 4.1.4.0 to resolve this issue.
What an attacker can do
Modify or delete content without proper authorization.
Potential impact on your site
Authenticated users can alter or remove course content, affecting course integrity and student experience.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
