CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in CryoutCreations Serious Slider cryout-serious-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Serious Slider: from n/a through <= 1.2.7.
Explanation of Vulnerability in Simple Terms
Serious Slider versions 1.2.7 and earlier lack proper authorization checks, allowing authenticated users with low privileges to disrupt the slider's availability. An attacker with a basic user account can trigger a denial-of-service condition affecting the component's operation. Update to a version newer than 1.2.7 to resolve this issue.
What an attacker can do
Disrupt the slider's availability by exploiting missing authorization checks.
Potential impact on your site
Authenticated users can cause the slider to become unavailable or malfunction.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
