This vulnerability in mojoomla WPAMS involves incorrect privilege assignment that permits privilege escalation. The affected versions include all releases up to 44.0 (dated 17-08-2023). The CVSS 3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, and no user interaction required. The impact includes high confidentiality, integrity, and availability loss. No patch or vendor advisory details are currently available, and the product is not a cloud service.

Successful exploitation allows an attacker with some privileges to escalate their access rights, potentially gaining full control over the WPAMS system. This can lead to unauthorized access to sensitive data, modification or deletion of data, and disruption of service. The CVSS score of 8.8 reflects the critical nature of the impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the WPAMS system to trusted users only and monitor for unusual privilege escalations. Avoid granting unnecessary privileges to users as a precaution.