CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Plugin Devs Product Carousel Slider for Elementor ecommerce-product-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Carousel Slider for Elementor: from n/a through <= 2.1.3.
Explanation of Vulnerability in Simple Terms
Product Carousel Slider for Elementor versions 2.1.3 and earlier lack proper authorization checks. A logged-in user can trigger a denial-of-service condition by performing specific actions that require user interaction. The vulnerability does not affect data confidentiality or integrity, only site availability.
What an attacker can do
A logged-in user can make the site temporarily unavailable or unresponsive.
Potential impact on your site
Site availability may be disrupted if a user account is compromised or a user is socially engineered.
Conditions required to exploit
Attacker must have a user account on the site and trick a user into clicking a malicious link or visiting a crafted page.
Key dates
External resources
Related vulnerabilities
