This vulnerability in enituretechnology's LTL Freight Quotes – Worldwide Express Edition (versions up to 5.0.20) is due to missing authorization checks caused by incorrectly configured access control security levels. It allows unauthorized users to perform actions that should require proper permissions, impacting the integrity of the system. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is low.

The vulnerability allows unauthorized modification or manipulation of data or functionality within the affected product, potentially leading to integrity issues. There is no impact on confidentiality or availability. No known exploits are currently reported in the wild, suggesting limited or no active exploitation at this time.

Patch status is not yet confirmed — no official patch or remediation guidance is currently available from the vendor. Security teams should monitor the vendor's advisory channels for updates. Until a fix is released, restricting access to the affected product and reviewing access control configurations may help reduce risk.