CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in BBR Plugins Better Business Reviews better-business-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Business Reviews: from n/a through <= 0.1.1.
Explanation of Vulnerability in Simple Terms
Better Business Reviews through version 0.1.1 fails to properly check user permissions before allowing modifications to review data. A logged-in user with low privileges can alter or delete reviews they should not have access to. The vulnerability requires an active user account but no special interaction from victims.
What an attacker can do
Modify or delete reviews belonging to other users without authorization.
Potential impact on your site
Users' reviews can be altered or removed by other authenticated users, damaging data integrity and user trust.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
