CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Automattic WP Job Manager - Resume Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager - Resume Manager: from n/a through 2.1.0.
Explanation of Vulnerability in Simple Terms
WP Job Manager - Resume Manager through version 2.1.0 fails to properly check user permissions before allowing modifications to resume data. A logged-in user with low privileges can alter resumes they should not have access to. The vulnerability requires an active user account but no special interaction from the victim.
What an attacker can do
Modify or alter resume data belonging to other users without proper authorization.
Potential impact on your site
Users' resume information can be altered by other site members, compromising data integrity and user trust.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no victim interaction required.
Key dates
External resources
Related vulnerabilities
