CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Landing Page: from n/a through <= 1.2.7.
Explanation of Vulnerability in Simple Terms
Lawyer Landing Page versions 1.2.7 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify site content over the network. The vulnerability does not expose sensitive data or disrupt availability, but attackers can alter information without needing credentials or user interaction. Update to a version newer than 1.2.7 to remediate.
What an attacker can do
Modify site content without authentication.
Potential impact on your site
Attackers can alter your site's content, potentially defacing pages or injecting misleading information.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
