CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Sabuj Kundu CBX Bookmark & Favorite cbxwpbookmark allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CBX Bookmark & Favorite: from n/a through <= 2.0.1.
Explanation of Vulnerability in Simple Terms
CBX Bookmark & Favorite through version 2.0.1 fails to properly check user permissions before allowing modifications to bookmarks and favorites. A logged-in user with low privileges can alter or delete bookmarks belonging to other users. The vulnerability requires an active user account but no special access level.
What an attacker can do
Modify or delete other users' bookmarks and favorites without authorization.
Potential impact on your site
Users' saved bookmarks and favorites can be tampered with or erased by other site members.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
