This vulnerability in e-plugins Institutions Directory involves missing authorization checks due to misconfigured access control settings. It affects versions up to 1.3.4 and allows attackers with limited privileges to escalate their impact, potentially causing high integrity and low confidentiality impacts along with low availability impact. The CVSS vector indicates network attack vector, low complexity, privileges required, no user interaction, unchanged scope, and impacts confidentiality, integrity, and availability to varying degrees. No patch or official remediation information is currently available.

An attacker with limited privileges could exploit this vulnerability to perform unauthorized actions that compromise the integrity of the Institutions Directory data and partially affect confidentiality and availability. This could lead to unauthorized modifications or access to sensitive information within the affected system. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in the Institutions Directory to ensure proper authorization checks are enforced. Monitor for vendor updates or patches addressing this vulnerability.