CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bonus for Woo: from n/a through <= 7.6.6.
Explanation of Vulnerability in Simple Terms
Bonus for Woo versions 7.6.6 and earlier contain an integrity vulnerability that allows unauthenticated attackers to modify data over the network without user interaction. The vulnerability has a CVSS score of 5.3 (medium severity). No confidentiality or availability impact is present. Update to a version newer than 7.6.6.
What an attacker can do
Modify data on the site without authentication or user interaction.
Potential impact on your site
Site data can be altered by remote attackers without warning or authentication.
Conditions required to exploit
Network access only; no authentication or user action required.
Key dates
External resources
Related vulnerabilities
