This vulnerability in M.Code Bulk Menu Edit (<= 1.3) involves missing authorization checks that allow users with limited privileges to perform unauthorized bulk menu edits. The weakness stems from incorrect access control configuration, potentially enabling integrity and availability impacts. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) indicates network attack vector, low attack complexity, privileges required but no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. No patch or mitigation details are currently available.

The vulnerability allows an attacker with limited privileges to modify bulk menu settings without proper authorization, potentially leading to unauthorized changes that affect the integrity and availability of the system. There is no confidentiality impact reported. The high CVSS score reflects the significant risk to system availability and integrity if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Bulk Menu Edit functionality to trusted users only and monitor for unusual activity related to bulk menu modifications.