CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Permalink Manager Lite: from n/a through < 2.5.3.
Explanation of Vulnerability in Simple Terms
Permalink Manager Lite versions up to 2.5.3 lack proper authorization checks, allowing unauthenticated attackers to read sensitive information. An attacker can access data without logging in or performing any special actions. The vulnerability exposes confidential information but does not allow modification or disruption of the site.
What an attacker can do
Read sensitive information without authentication.
Potential impact on your site
Confidential data may be exposed to anyone on the internet without needing a login.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
