CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in wpseek Admin Management Xtended admin-management-xtended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin Management Xtended : from n/a through <= 2.5.1.
Explanation of Vulnerability in Simple Terms
Admin Management Xtended versions up to 2.5.1 lack proper authorization checks, allowing high-privilege users to access or modify resources they should not be able to reach. The vulnerability affects confidentiality, integrity, and availability with low impact. Attack complexity is high, and scope is changed, meaning the impact may extend beyond the vulnerable component itself.
What an attacker can do
A high-privilege user can access or modify resources without proper authorization checks.
Potential impact on your site
High-privilege admin accounts could be misused to access or alter data beyond their intended scope.
Conditions required to exploit
Attacker must have high-level administrative privileges and network access to the site.
Key dates
External resources
