CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Spider Themes Spider Elements spider-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spider Elements: from n/a through <= 1.6.6.
Explanation of Vulnerability in Simple Terms
Spider Elements versions 1.6.6 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify or disable site functionality. The vulnerability affects multiple components and can impact site availability and integrity. Users should update to a version newer than 1.6.6 when available.
What an attacker can do
Modify or disable site features and functionality without proper authorization.
Potential impact on your site
Authenticated users can alter site behavior, disable features, or cause service disruption.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
