Missing Authorization Vulnerability Affects Schema & Structured Data for WP & AMP

CVE-2024-49683

5.3MEDIUM

Key Information

Vendor: Schema & Structured Data For WP & Amp
Status: Schema & Structured Data For WP & Amp
Vendor: CVE Published:; 24 October 2024

Summary

Missing Authorization vulnerability in Schema & Structured Data for WP & AMP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.3.5.

Affected Version(s)

Schema & Structured Data for WP & AMP <= 1.3.5

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Oct 24, 2024
Vulnerability Reserved.
Oct 17, 2024

Collectors

NVD DatabaseMitre Database

Credit

Joshua Chan (Patchstack Alliance)