CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in saoshyant1994 Saoshyant Page Builder saoshyant-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Saoshyant Page Builder: from n/a through <= 3.8.
Explanation of Vulnerability in Simple Terms
Saoshyant Page Builder versions 3.8 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify site content. An attacker can send network requests to alter pages or posts without logging in. This affects all installations running the vulnerable version. Update to a version newer than 3.8 to resolve the issue.
What an attacker can do
Modify or alter site content (pages, posts) without authentication.
Potential impact on your site
Attackers can deface or alter published content without your knowledge or permission.
Conditions required to exploit
Network access to the site; no login or user interaction required.
Key dates
External resources
Related vulnerabilities
