This vulnerability in vgdevsolutions Checkout Gateway for IRIS (versions up to 1.3) arises from missing authorization checks caused by misconfigured access control security levels. An attacker can exploit this to perform unauthorized actions affecting the integrity and availability of the system. The CVSS 3.1 base score is 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L), indicating network exploitable with low attack complexity and no privileges or user interaction required. No patch or official fix information is available from the provided data.

Exploitation of this vulnerability can lead to unauthorized modification of data or disruption of service (integrity and availability impacts). Confidentiality is not affected. The vulnerability can be exploited remotely without authentication or user interaction. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict network access to the affected service where possible and review access control configurations to mitigate risk.