CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cool Author Box: from n/a through <= 2.9.9.
Explanation of Vulnerability in Simple Terms
Cool Author Box versions 2.9.9 and earlier do not properly check user permissions before allowing access to certain functions. An attacker without authentication can read limited information from the site. The vulnerability requires no user interaction and affects only the confidentiality of data, not its integrity or availability.
What an attacker can do
Read limited non-public information from the site without logging in.
Potential impact on your site
Unauthorized users can access sensitive data that should be restricted to authenticated users.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
