CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CP Multi View Event Calendar : from n/a through <= 1.4.35.
Explanation of Vulnerability in Simple Terms
CP Multi View Event Calendar versions up to 1.4.35 lack proper authorization checks on certain administrative functions. A high-privileged user can modify or disable event data without proper validation. The vulnerability requires administrator-level access and does not expose sensitive information, but can degrade site functionality.
What an attacker can do
Modify or disable event calendar data if they have administrator privileges.
Potential impact on your site
Administrators with compromised accounts could alter or disable calendar events, affecting site visitors and event management.
Conditions required to exploit
Attacker must have high-level administrative access to the site.
Key dates
External resources
Related vulnerabilities
