This vulnerability in HD Quiz – Save Results Light arises from missing authorization checks, allowing users with some privileges to perform actions beyond their intended access level. Specifically, it involves incorrectly configured access control security levels, which can be exploited to affect the integrity and availability of the system. The issue affects versions up to and including 0.5. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

Exploitation of this vulnerability could allow an attacker with limited privileges to perform unauthorized actions that may alter data or disrupt service availability within the affected plugin. There is no confidentiality impact reported. The overall impact is limited to integrity and availability with medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or advisory is provided, users should monitor Harmonic Design's communications for updates. Until a fix is available, review and tighten access control configurations where possible to limit exposure.