CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in wpdiscover Photo Gallery Builder photo-gallery-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Photo Gallery Builder: from n/a through <= 3.0.
Explanation of Vulnerability in Simple Terms
Photo Gallery Builder versions 3.0 and earlier lack proper authorization checks, allowing authenticated users to modify gallery content they should not have access to. The vulnerability requires a valid user account but no special privileges. Impact is limited to data integrity; confidentiality and availability are not affected.
What an attacker can do
Modify gallery content without proper authorization.
Potential impact on your site
Authenticated users can alter galleries they don't own or shouldn't access.
Conditions required to exploit
Attacker must have a valid user account on the site.
Key dates
External resources
Related vulnerabilities
