CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conversios.io: from n/a through <= 7.2.3.
Explanation of Vulnerability in Simple Terms
Conversios.io versions up to 7.2.3 lack proper authorization checks, allowing authenticated users with low privileges to modify data they should not have access to. The vulnerability requires a valid user account but no special permissions. Integrity of stored data can be compromised without affecting availability or confidentiality.
What an attacker can do
Modify data or settings they should not have permission to change.
Potential impact on your site
Unauthorized users can alter configuration or content, potentially disrupting service or data integrity.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
