This vulnerability in WholesaleX involves missing authorization checks, which means that users with limited privileges may be able to perform actions they are not authorized to do, potentially modifying data or system state (integrity impact). The CVSS vector indicates the attack can be performed remotely over the network with low complexity and does not require user interaction. The affected versions include all versions up to 1.3.1. No vendor advisory or patch information is provided, and the product is not a cloud service.

The impact is limited to integrity, meaning unauthorized users could alter data or system behavior without proper authorization. Confidentiality and availability are not affected according to the CVSS vector. The medium severity score reflects the potential for unauthorized modification but no direct confidentiality or availability compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, organizations should monitor for vendor updates and consider restricting access to the affected product to trusted users only until a patch is available.