CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9.
Explanation of Vulnerability in Simple Terms
Seraphinite Post .DOCX Source versions up to 2.16.9 fail to properly check user permissions before allowing access to certain functions. A logged-in user with low privileges can read sensitive information they should not have access to. The vulnerability requires valid site credentials but no special interaction.
What an attacker can do
Read sensitive information they should not have access to as a low-privilege user.
Potential impact on your site
Unauthorized information disclosure to any registered user, even those with minimal permissions.
Conditions required to exploit
Attacker must have a valid low-privilege account on the site.
Key dates
External resources
Related vulnerabilities
