CVE-2025-23930 describes a missing authorization vulnerability in paypalmuse PayPal Marketing Solutions (up to version 1.2). The issue arises from incorrectly configured access control security levels, allowing users with limited privileges to perform unauthorized actions that impact data integrity. The CVSS 3.1 base score is 4.3 (medium), with network attack vector, low attack complexity, requiring privileges, no user interaction, and no confidentiality or availability impact. The vulnerability is published and assigned by Patchstack, but no patch or exploit information is currently available.

The vulnerability allows unauthorized modification of data or actions within the affected product due to missing authorization checks. There is no impact on confidentiality or availability. Exploitation requires some level of privileges but no user interaction. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, review and tighten access control configurations where possible to limit privilege escalation or unauthorized actions. Monitor official vendor communications for updates or fixes.