CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through <= 6.2.1.
Explanation of Vulnerability in Simple Terms
Webba Booking versions 6.2.1 and earlier lack proper authorization checks, allowing authenticated users to modify data they should not have access to. An attacker with a low-privilege account can alter booking information or other records without proper permission validation. The vulnerability affects the integrity of booking data but does not expose sensitive information or cause service disruption.
What an attacker can do
Modify booking records or other data without proper authorization.
Potential impact on your site
Booking data integrity is at risk; users with basic accounts can alter records they shouldn't access.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
