CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Lifecycle Timeline
2DescriptionNVD
Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMSMasters Content Composer: from n/a through <= 2.5.8.
AnalysisAI
cmsmasters CMSMasters Content Composer cmsmasters-content-composer is affected by missing authorization (CVSS 7.1).
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Audit access logs for unauthorized Content Composer activity and disable the plugin if not business-critical. Within 7 days: Implement WAF rules to restrict Content Composer API endpoints to authenticated users only, and review user roles/permissions. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today