This vulnerability in Seriously Simple Podcasting involves missing authorization checks due to misconfigured access control, which may permit users with low privileges to execute actions beyond their intended permissions. It affects all versions up to 3.13.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is low.

The impact is limited to integrity, meaning unauthorized modification of data or settings may occur without affecting confidentiality or availability. Since the attack requires some level of privileges and no user interaction, the risk is moderate. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in Seriously Simple Podcasting to ensure proper authorization enforcement. Monitor for vendor updates or patches addressing this issue.