CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Aslam Khan Gouran Gou Manage My Account Menu gou-wc-account-tabs allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Gou Manage My Account Menu: from n/a through <= 1.0.1.8.
Explanation of Vulnerability in Simple Terms
Gou Manage My Account Menu versions 1.0.1.8 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify account-related data or settings. The vulnerability requires no user interaction and is exploitable over the network. An attacker can alter information without needing valid credentials or victim interaction.
What an attacker can do
Modify account settings or data without authentication.
Potential impact on your site
Unauthorized changes to user account information or menu settings by unauthenticated attackers.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
