CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – Worldwide Express Edition: from n/a through <= 5.0.20.
Explanation of Vulnerability in Simple Terms
The LTL Freight Quotes plugin fails to properly check user permissions before allowing certain actions. An attacker without authentication can modify data through the plugin's functions. The vulnerability affects all versions up to 5.0.20. Site owners should update to a version newer than 5.0.20 when available.
What an attacker can do
Modify plugin data without logging in or having permission to do so.
Potential impact on your site
Unauthorized users can alter freight quote data or plugin settings without your knowledge or consent.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
