This vulnerability (CVE-2025-63041) is classified as CWE-862 (Missing Authorization) in the Code Amp product Forget About Shortcode Buttons, specifically in versions up to 2.1.3. It allows users with limited privileges to bypass intended access controls, potentially leading to unauthorized modification or disruption of functionality. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) indicates network attack vector, low attack complexity, requires low privileges, no user interaction, unchanged scope, no confidentiality impact, but integrity and availability impacts are low and low respectively. The vulnerability is published and recognized but lacks an official fix or vendor advisory detailing remediation steps.

The vulnerability could allow an attacker with low privileges to perform unauthorized actions that affect the integrity and availability of the affected system. Confidentiality is not impacted. There are no known exploits in the wild, reducing immediate risk, but the potential for unauthorized modification or disruption exists.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a patch is available, restrict access to trusted users and consider additional access control measures where possible to limit exposure.