CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in RealMag777 TableOn posts-table-filterable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TableOn: from n/a through <= 1.0.5.1.
Explanation of Vulnerability in Simple Terms
TableOn versions up to 1.0.5.1 lack proper authorization checks, allowing authenticated users to modify or disable functionality they should not have access to. An attacker with low-level credentials can alter data or disrupt service availability. No confidentiality breach occurs, but integrity and availability are at risk. Update to a version newer than 1.0.5.1.
What an attacker can do
Modify or disable features and data without proper authorization.
Potential impact on your site
Authenticated users can alter or disable TableOn features beyond their intended permissions.
Conditions required to exploit
Attacker must have a low-level user account on the site.
Key dates
External resources
Related vulnerabilities
