CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in MantraBrain Ultimate Watermark ultimate-watermark allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Watermark: from n/a through <= 1.1.
Explanation of Vulnerability in Simple Terms
Ultimate Watermark versions 1.1 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify content they should not have access to. The vulnerability requires a valid user account but no special interaction. Integrity of site content is at risk if an attacker gains even basic user credentials.
What an attacker can do
Modify content or settings they should not have permission to change.
Potential impact on your site
Unauthorized users can alter site content, watermarks, or settings if they obtain any valid login credential.
Conditions required to exploit
Valid user account with low-level privileges; network access to the site.
Key dates
External resources
Related vulnerabilities
