CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through <= 1.6.10.2.
Explanation of Vulnerability in Simple Terms
Simply Schedule Appointments versions 1.6.10.2 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify appointment data over the network. The vulnerability does not expose sensitive information or disrupt service availability, but attackers can alter scheduling records without authentication or user interaction.
What an attacker can do
Modify appointment data without logging in or user interaction.
Potential impact on your site
Appointment records can be altered by anyone, potentially disrupting scheduling and customer trust.
Conditions required to exploit
Network access to the site; no authentication or user action required.
Key dates
External resources
Related vulnerabilities
