CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form Builder: from n/a through <= 3.8.20.
Explanation of Vulnerability in Simple Terms
Easy Form Builder versions 3.8.20 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify form data or settings over the network. No user interaction is required. The vulnerability affects the integrity of form submissions and configurations but does not expose sensitive data or cause service disruption.
What an attacker can do
Modify form data or settings without authentication.
Potential impact on your site
Form submissions and configurations can be altered by unauthorized parties, potentially corrupting data or redirecting submissions.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
