Sunshine Photo Cart versions up to 3.2.8 suffer from a Missing Authorization vulnerability (CVE-2024-47314) due to incorrectly configured access control security levels. This allows an attacker with low privileges to perform unauthorized actions that can lead to integrity loss and denial of service. The vulnerability is network exploitable, requires low attack complexity, and does not require user interaction. Confidentiality impact is not present, but integrity and availability impacts are significant. No vendor advisory or patch information is currently available.

The vulnerability allows unauthorized modification or disruption of the Sunshine Photo Cart application, potentially leading to data integrity issues and service outages. Confidentiality is not affected. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected versions and monitor for suspicious activity related to access control misuse. Avoid deploying vulnerable versions in exposed environments.