The vulnerability CVE-2025-60088 in WebinarIgnition is due to missing authorization controls caused by misconfigured access control security levels. This allows users with low privileges to access resources or perform actions that should be restricted. The affected versions include all versions up to 4.06.04. The CVSS 3.1 base score is 6.5, with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

An attacker with low privileges can exploit this vulnerability to gain unauthorized access to sensitive information, resulting in a high confidentiality impact. There is no impact on integrity or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to trusted users and review access control configurations to minimize exposure.