CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Incorrect Privilege Assignment vulnerability in azexo Marketing Automation by AZEXO marketing-automation-by-azexo allows Privilege Escalation.This issue affects Marketing Automation by AZEXO: from n/a through <= 1.27.80.
Explanation of Vulnerability in Simple Terms
Marketing Automation by AZEXO versions 1.27.80 and earlier contain an improper privilege escalation vulnerability. An authenticated user with low privileges can read, modify, or delete sensitive data and disrupt site operations. The vulnerability requires only network access and no user interaction. All sites running affected versions should update immediately.
What an attacker can do
Read, modify, or delete sensitive data; disrupt site availability.
Potential impact on your site
Authenticated users can access and modify data beyond their intended permissions, risking data loss and service disruption.
Conditions required to exploit
Attacker must have a low-privilege account on the site.
Key dates
External resources
Related vulnerabilities
