This vulnerability in mondula2016 Multi Step Form arises from missing authorization checks, which means that certain actions or data may be accessible without proper permission validation. The affected versions include all releases up to and including 1.7.21. The CVSS score of 4.3 reflects a network attack vector with low complexity and requiring low privileges, no user interaction, and resulting in integrity impact only. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability allows an attacker with low privileges to exploit incorrect access control configurations, potentially modifying data or performing unauthorized actions within the Multi Step Form application. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and strengthen access control configurations in the Multi Step Form application to ensure proper authorization checks are enforced on all sensitive operations.