CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
What the vulnerability does
Missing Authorization vulnerability in ThemeHunk Zita Site Builder ai-site-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Zita Site Builder: from n/a through <= 1.0.2.
Explanation of Vulnerability in Simple Terms
Zita Site Builder versions up to 1.0.2 lack proper authorization checks, allowing unauthenticated attackers to modify or delete site content and data. The vulnerability requires only network access and no user interaction. Site administrators should update immediately to a version newer than 1.0.2.
What an attacker can do
Modify or delete site content and data without authentication.
Potential impact on your site
Attackers can alter or destroy your site's content and functionality without logging in.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
