CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Xfinitysoft Content Cloner super-seo-content-cloner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Cloner: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
Content Cloner versions 1.0.1 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify content they should not have access to. The vulnerability requires a valid user account but no special interaction. Administrators should update to a version newer than 1.0.1 to prevent unauthorized content changes.
What an attacker can do
Modify content without proper authorization.
Potential impact on your site
Authenticated users can alter content beyond their assigned permissions.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
