CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Munir Kamal Block Slider block-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Block Slider: from n/a through <= 2.2.3.
Explanation of Vulnerability in Simple Terms
Block Slider versions 2.2.3 and earlier lack proper authorization checks, allowing authenticated users with low privileges to read sensitive data they should not access. An attacker with a basic user account can retrieve confidential information from the plugin without additional interaction. This affects the confidentiality of data stored or managed by the plugin.
What an attacker can do
Read sensitive data they should not have access to using a low-privilege user account.
Potential impact on your site
Confidential information may be exposed to any authenticated user, even those with minimal permissions.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site; no special user interaction required.
Key dates
External resources
