The vulnerability CVE-2025-48335 affects CyberChimps Responsive Plus versions up to 3.2.0 and is characterized by missing authorization checks. This results in incorrectly configured access control security levels that can be exploited by attackers with low privileges to perform unauthorized actions affecting data integrity and system availability. The CVSS 3.1 base score is 5.4 (medium), with attack vector network, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, but integrity and availability impacts present. No patch or remediation details are provided in the available data.

Exploitation of this vulnerability could allow an attacker with limited privileges to perform unauthorized actions that impact the integrity and availability of the affected system. There is no impact on confidentiality. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, users should monitor CyberChimps advisories for updates. Until a fix is released, restrict access to the affected plugin and review user privileges to minimize risk.