This vulnerability, classified under CWE-266 (Incorrect Privilege Assignment), exists in mojoomla Hospital Management System version 47.0(20. It allows an attacker with limited privileges to escalate their privileges within the system, potentially gaining unauthorized access or control. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no user interaction, affecting confidentiality, integrity, and availability with high impact. No vendor patch or advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could lead to unauthorized privilege escalation, compromising sensitive hospital management data and potentially disrupting system operations. The high CVSS score reflects significant risk to confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should carefully review user privilege assignments and restrict access to trusted users only. Monitor for unusual privilege escalations and apply compensating controls as appropriate.