CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Skimlinks Skimlinks Affiliate Marketing Tool skimlinks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Skimlinks Affiliate Marketing Tool: from n/a through <= 1.3.
Explanation of Vulnerability in Simple Terms
The Skimlinks Affiliate Marketing Tool versions 1.3 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify data on affected sites. An attacker can send network requests without authentication to alter information. The vulnerability has a CVSS score of 5.3, indicating moderate risk. Site administrators should update to a version newer than 1.3 when available.
What an attacker can do
Modify site data without logging in or providing credentials.
Potential impact on your site
Unauthorized changes to site content or settings managed by the Skimlinks tool.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
