This vulnerability in Cookie-Script.com arises from missing authorization checks, enabling unauthorized access to certain functions or data due to improperly configured access control security levels. It affects versions up to and including 1.2.1. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, integrity impact, and no availability impact. No vendor advisory or patch information is provided, and it is not a cloud service.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions that affect the integrity of the system or data within Cookie-Script.com. There is no impact on confidentiality or availability. The vulnerability can be exploited remotely without authentication or user interaction. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in Cookie-Script.com deployments to prevent unauthorized access. Monitor vendor communications for updates on patches or official mitigations.