CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Incorrect Privilege Assignment vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Privilege Escalation.This issue affects RegistrationMagic: from n/a through <= 6.0.7.1.
Explanation of Vulnerability in Simple Terms
RegistrationMagic versions up to 6.0.7.1 contain a privilege escalation vulnerability that allows unauthenticated attackers to gain full control over the application. The vulnerability requires specific network conditions to exploit but does not require user interaction. Affected sites should update immediately to a patched version.
What an attacker can do
Gain unauthorized access and modify or delete data without authentication.
Potential impact on your site
Attackers can read, modify, or delete sensitive registration data and user information without logging in.
Conditions required to exploit
Network access to the vulnerable application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
