This vulnerability in QuanticaLabs Cost Calculator (versions up to 7.4) involves missing authorization controls due to misconfigured access control security levels. It allows users with limited privileges to potentially perform unauthorized actions, impacting the integrity of the system. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and no user interaction required, but limited impact confined to integrity. No patches or official fixes have been documented at this time.

The impact is limited to integrity loss without confidentiality or availability effects. Unauthorized users with some privileges may perform actions beyond their intended scope, potentially altering data or configurations within the Cost Calculator application. There is no evidence of exploitation in the wild, and the vulnerability does not affect confidentiality or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patches or fixes are documented, users should monitor vendor communications for updates. In the meantime, review and tighten access control configurations to ensure proper authorization enforcement within the application.