CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.26.
Explanation of Vulnerability in Simple Terms
Church Admin versions 5.0.26 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify data on the site. The vulnerability requires only network access and no user interaction. An attacker can alter information without needing valid credentials or admin privileges.
What an attacker can do
Modify site data without authentication or admin access.
Potential impact on your site
Unauthorized users can alter church records, settings, or other data stored in Church Admin.
Conditions required to exploit
Network access to the site; no authentication required.
Key dates
External resources
Related vulnerabilities
