CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in merkulove Masker for Elementor masker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masker for Elementor: from n/a through <= 1.1.4.
Explanation of Vulnerability in Simple Terms
Masker for Elementor versions 1.1.4 and earlier lack proper authorization checks, allowing authenticated users to read or modify sensitive data they should not access. An attacker with a low-privilege account can exploit this to view or alter information belonging to other users or the site. Update to a version newer than 1.1.4 to resolve this issue.
What an attacker can do
Read or modify sensitive data belonging to other users or the site.
Potential impact on your site
Authenticated users can access or change data outside their permission scope, risking data exposure or corruption.
Conditions required to exploit
Attacker must have a low-privilege account on the site; no user interaction required.
Key dates
External resources
