CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift: from n/a through <= 9.7.
Explanation of Vulnerability in Simple Terms
Greenshift contains an authorization flaw that allows authenticated users with low privileges to read or modify data they should not have access to. The vulnerability affects versions 0 through 9.7. An attacker with a valid user account can exploit this to view or alter sensitive information within the application's scope.
What an attacker can do
Read or modify data belonging to other users or restricted areas of the application.
Potential impact on your site
Unauthorized data disclosure or modification by authenticated users; confidentiality and integrity of user data at risk.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges; no user interaction required.
Key dates
External resources
Related vulnerabilities
