This vulnerability in VPSUForm arises from missing authorization checks, which leads to incorrect access control enforcement. Users with limited privileges may exploit this flaw to perform unauthorized actions, potentially impacting the integrity and availability of the application. The issue affects all versions up to and including 3.0.5. The CVSS vector indicates network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

The vulnerability allows unauthorized modification or disruption of the VPSUForm application by users with limited privileges. While confidentiality is not affected, integrity and availability impacts are rated low, meaning attackers could alter data or cause partial service disruption but not gain sensitive information or cause complete denial of service. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in VPSUForm to ensure proper authorization checks are enforced. Monitor for updates from the vendor regarding patches or official mitigations.