CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in GS Plugins GS Testimonial Slider gs-testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Testimonial Slider: from n/a through <= 3.3.0.
Explanation of Vulnerability in Simple Terms
GS Testimonial Slider versions 3.3.0 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify plugin data. An attacker with a basic user account can alter testimonials or plugin settings without proper permission verification. This affects the integrity of displayed content but does not expose sensitive data or disrupt site availability.
What an attacker can do
Modify testimonials and plugin settings without proper authorization.
Potential impact on your site
Testimonials and plugin configuration can be altered by unauthorized users, compromising content integrity.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
