CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Discussion Board: from n/a through <= 2.5.7.
Explanation of Vulnerability in Simple Terms
Marketing Fire Discussion Board versions 2.5.7 and earlier lack proper authorization checks, allowing authenticated users to modify content they should not have access to. An attacker with a low-privilege account can alter discussion board data without proper permission validation. The vulnerability affects integrity but not confidentiality or availability.
What an attacker can do
Modify discussion board content or settings without proper authorization.
Potential impact on your site
Unauthorized users can alter discussion board posts, topics, or configuration.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
