This vulnerability in Admin and Site Enhancements (ASE) Pro arises from incorrect privilege assignment, enabling privilege escalation. It affects versions up to 7.6.2.1. The CVSS 3.1 score is 7.5, reflecting network attack vector, high complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is available, and the product is not a cloud service.

Successful exploitation allows an attacker with limited privileges to escalate their privileges, potentially gaining administrative control over the affected system. This can lead to full compromise of the affected environment, including unauthorized access to sensitive data and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected plugin and monitor for suspicious activity related to privilege escalation attempts. Avoid granting unnecessary privileges to users.