This vulnerability in Link Whisper Free (versions <= 0.9.2) arises from missing authorization checks, which results in incorrect access control enforcement. The CVSS score of 5.3 reflects a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to integrity, with no confidentiality or availability impact. The product is cloud-hosted, and the vendor manages remediation server-side.

The vulnerability allows an attacker to exploit missing authorization controls, potentially modifying data or actions that should be restricted, impacting data integrity. There is no impact on confidentiality or availability. No known exploits have been reported in the wild.

Since Link Whisper Free is a cloud service, the vendor manages remediation and patch deployment server-side. A patch is available, and users should verify with the vendor advisory that their service instance is updated. No additional user action is required unless otherwise instructed by the vendor.