This vulnerability in Trustpilot Reviews arises from missing authorization checks caused by incorrectly configured access control security levels. It affects versions up to and including 2.5.925. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, and limited confidentiality impact. There is no evidence of known exploitation in the wild. No official patch or vendor advisory is currently provided, and the product is not a cloud service.

The vulnerability allows users with some level of privilege to bypass intended access controls, potentially exposing limited confidential information. There is no impact on integrity or availability. The overall impact is limited to confidentiality with a medium severity rating.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations where possible to limit exposure. Monitor vendor communications for updates on patches or official mitigations.