CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Rashid Slider Path for Elementor slider-path allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Path for Elementor: from n/a through <= 3.0.0.
Explanation of Vulnerability in Simple Terms
Slider Path for Elementor versions up to 3.0.0 lack proper authorization checks, allowing authenticated users to modify content they should not have access to. An attacker with a low-privilege account can alter slider settings or data without proper permission validation. This affects the integrity of published content but does not expose sensitive information or cause service disruption.
What an attacker can do
Modify slider content or settings without proper authorization.
Potential impact on your site
Unauthorized users can alter slider configurations, potentially defacing or corrupting published content.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
