CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Mizan Themes Mizan Demo Importer mizan-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mizan Demo Importer: from n/a through <= 0.1.3.
Explanation of Vulnerability in Simple Terms
Mizan Demo Importer versions 0.1.3 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify site data. An attacker can alter content or settings without proper permission verification. Update to a version newer than 0.1.3 to resolve this issue.
What an attacker can do
Modify site content or settings without proper authorization.
Potential impact on your site
Unauthorized users can alter your site's content or configuration through the demo importer.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
