CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Incorrect Privilege Assignment vulnerability in AllAccessible Accessibility by AllAccessible allaccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through <= 1.3.4.
Explanation of Vulnerability in Simple Terms
Accessibility by AllAccessible versions 1.3.4 and earlier contain an improper access control vulnerability. An authenticated user with low privileges can read, modify, or delete sensitive data and functionality on the site. The vulnerability requires network access and valid login credentials but no additional user interaction.
What an attacker can do
Read, modify, or delete sensitive site data and functionality with a low-privilege account.
Potential impact on your site
Any authenticated user can compromise site data, settings, and availability without admin approval.
Conditions required to exploit
Valid login credentials with low-level site access; network access to the site.
Key dates
External resources
Related vulnerabilities
