CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in ThemeNectar Salient Core salient-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salient Core: from n/a through <= 3.0.8.
Explanation of Vulnerability in Simple Terms
Salient Core through version 3.0.8 lacks proper authorization checks, allowing authenticated users to modify content they should not have access to. An attacker with a low-privilege account can alter data integrity without administrative approval. The vulnerability requires valid login credentials but no additional user interaction. Update to a version newer than 3.0.8.
What an attacker can do
Modify content or settings without proper authorization as a low-privilege user.
Potential impact on your site
Unauthorized changes to site content or configuration by users with limited permissions.
Conditions required to exploit
Valid login credentials (low-privilege account); network access to the site.
Key dates
External resources
