CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in sonalsinha21 SKT Page Builder skt-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SKT Page Builder: from n/a through <= 4.9.
Explanation of Vulnerability in Simple Terms
SKT Page Builder versions 4.9 and earlier contain an authorization flaw that allows authenticated users to modify content they should not have access to. An attacker with low-level site access can alter page data without proper permission checks. The vulnerability requires an active user account but no special privileges or user interaction from victims.
What an attacker can do
Modify page content and settings without proper authorization checks.
Potential impact on your site
Unauthorized users can alter published pages, potentially defacing content or injecting malicious material.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
