CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through < 15.6.9.
Explanation of Vulnerability in Simple Terms
Simple Business Directory Pro versions 15.6.9 and earlier contain a critical vulnerability that allows unauthenticated attackers to read sensitive data, modify site content, and disrupt service. The vulnerability requires no user interaction and can be exploited remotely over the network. All installations of affected versions should be updated immediately.
What an attacker can do
Read sensitive data, modify or delete content, and disrupt the site without needing to log in.
Potential impact on your site
Your site's data and functionality are fully compromised; attackers can access, modify, or delete any information.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
