This vulnerability involves missing authorization in the InfoGiants Simple Website Logo product, affecting versions up to 1.1. The issue arises from incorrectly configured access control security levels, allowing unauthorized users to perform actions that should require authorization. The CVSS score is 5.3 (medium), reflecting a network attack vector with low complexity, no privileges required, no user interaction, and an impact limited to integrity. No patch or vendor advisory is currently provided, and the product is not a cloud service.

The vulnerability allows unauthorized modification or actions due to missing authorization checks, impacting the integrity of the affected system. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations manually to prevent unauthorized actions. Monitor vendor communications for updates on patches or official mitigations.