CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.30.
Explanation of Vulnerability in Simple Terms
Church Admin versions up to 5.0.30 lack proper authorization checks, allowing unauthenticated attackers to modify data on the site. The vulnerability requires only network access and no user interaction. An attacker can alter information without needing to log in or trick anyone into clicking a link.
What an attacker can do
Modify data on the site without logging in.
Potential impact on your site
Unauthorized changes to site content or settings by anyone with access to your site's URL.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
