CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Missing Authorization vulnerability in Elated-Themes Elated Listing eltd-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elated Listing: from n/a through <= 1.4.
Explanation of Vulnerability in Simple Terms
Elated Listing versions 1.4 and earlier lack proper authorization checks, allowing authenticated users to modify data they should not have access to. An attacker with a low-privilege account can change or corrupt content belonging to other users or the site. No user interaction is required. Update to a version newer than 1.4.
What an attacker can do
Modify or corrupt data belonging to other users or the site without proper permission.
Potential impact on your site
Any logged-in user can alter content they shouldn't access, risking data integrity and site stability.
Conditions required to exploit
Attacker must have a low-privilege account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
