CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from n/a through <= 2.0.8.
Explanation of Vulnerability in Simple Terms
PageLayer versions up to 2.0.8 contain a flaw that allows authenticated users to modify data they should not have access to. The vulnerability requires a valid user account and network access but no additional user interaction. Site administrators should update to version 2.1.3 or later to remediate the issue.
What an attacker can do
Modify data on the site without authorization.
Potential impact on your site
Authenticated users can alter site content or settings beyond their intended permissions.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges.
Key dates
External resources
Related vulnerabilities
