CVE-2025-47565 describes a missing authorization vulnerability in the ashanjay EventON plugin (versions up to 4.9.9). This vulnerability results from incorrectly configured access control security levels, which may allow users with limited privileges to access or modify resources or functionality without proper authorization. The CVSS 3.1 score of 6.3 reflects a medium severity with network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or official remediation information is provided, and no known exploits are reported.

The vulnerability can lead to unauthorized access or modification of data or functionality within the EventON plugin, potentially compromising confidentiality, integrity, and availability of the affected system. The medium CVSS score indicates a moderate risk that could be exploited remotely by users with limited privileges without requiring user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, review and tighten access control configurations in EventON to limit privilege escalation risks.