CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Melodic Media Slide Banners slide-banners allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slide Banners: from n/a through <= 1.3.
Explanation of Vulnerability in Simple Terms
Slide Banners versions 1.3 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify banner content they should not have access to. The vulnerability requires a valid user account but no special interaction. Integrity of banner data is at risk; confidentiality and availability are not affected.
What an attacker can do
Modify banner content without proper permission checks.
Potential impact on your site
Unauthorized users can alter slide banner content, potentially defacing or redirecting site visitors.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
