CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Webnus Inc. Modern Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modern Events Calendar: from n/a through 7.29.0.
Explanation of Vulnerability in Simple Terms
Modern Events Calendar versions up to 7.29.0 contain an authorization bypass that allows unauthenticated attackers to modify event data over the network. The vulnerability stems from missing access control checks on event modification endpoints. No user interaction is required to exploit this issue. Site administrators should update to a version newer than 7.29.0.
What an attacker can do
Modify event data without authentication or permission.
Potential impact on your site
Attackers can alter or corrupt event information visible to site visitors without logging in.
Conditions required to exploit
Network access to the site; no authentication required.
Key dates
External resources
Related vulnerabilities
