CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in UIUX Lab Uix Shortcodes uix-shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uix Shortcodes: from n/a through <= 2.0.3.
Explanation of Vulnerability in Simple Terms
Uix Shortcodes versions 2.0.3 and earlier lack proper authorization checks, allowing unauthenticated attackers to read and modify limited data on affected sites. The vulnerability requires specific conditions to exploit and does not affect site availability. Update to a version newer than 2.0.3 to resolve this issue.
What an attacker can do
Read and modify limited data without authentication.
Potential impact on your site
Unauthorized users may access or alter certain site data depending on plugin configuration.
Conditions required to exploit
Network access; specific conditions must be met to exploit the vulnerability.
Key dates
External resources
Related vulnerabilities
