CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse Form: from n/a through <= 2.2.0.
Explanation of Vulnerability in Simple Terms
Gutenverse Form versions up to 2.2.0 lack proper authorization checks on certain operations. A logged-in user with low privileges can modify form data or settings they should not have access to. The vulnerability does not expose sensitive information or crash the site, but allows unauthorized changes to form configurations.
What an attacker can do
Modify form data or settings without proper authorization.
Potential impact on your site
Unauthorized users can alter form configurations, potentially disrupting form functionality or data collection.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
