CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Bus Ticket Booking with Seat Reservation: from n/a before 5.6.8.
Explanation of Vulnerability in Simple Terms
The Bus Ticket Booking with Seat Reservation plugin fails to properly check user permissions before allowing certain actions. An attacker without authentication can modify data they should not have access to. The vulnerability affects versions before 5.6.8. Site administrators should update immediately to patch the authorization flaw.
What an attacker can do
Modify booking or seat reservation data without authentication.
Potential impact on your site
Attackers can alter ticket bookings and seat reservations, disrupting service and potentially causing financial loss.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
