CVE-2024-53798 describes a Missing Authorization vulnerability in the FloristPress product by BAKKBONE Australia, affecting versions up to 7.3.0. The vulnerability allows an attacker with low privileges to access or modify resources without proper authorization. The CVSS vector indicates network attack vector, low attack complexity, privileges required are low, no user interaction needed, unchanged scope, and impacts on confidentiality and integrity but not availability.

An attacker with low privileges can exploit this vulnerability to gain unauthorized access or perform unauthorized actions, potentially leading to limited confidentiality and integrity breaches within the affected FloristPress installations. There is no indication of availability impact or widespread exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected FloristPress versions and monitor for unusual activity related to authorization bypass. Avoid granting unnecessary privileges to users.