The vulnerability identified as CVE-2025-47628 affects quomodosoft's QS Dark Mode plugin versions up to 3.0. It is characterized by missing authorization controls, which means that certain actions or resources may be accessible without proper permission checks. This incorrect access control can be exploited by users with limited privileges to perform unauthorized operations, impacting the integrity and availability of the affected system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, but low integrity and availability impacts.

Exploitation of this vulnerability could allow an attacker with limited privileges to perform unauthorized actions that affect the integrity and availability of the system using QS Dark Mode. There is no confidentiality impact reported. No known active exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, users should monitor vendor communications for updates. In the meantime, review and tighten access control configurations where possible to mitigate risk.