The vulnerability CVE-2025-69183 affects the e-plugins Hospital Doctor Directory product up to version 1.3.9. It is caused by incorrect privilege assignment, which enables privilege escalation. The CVSS v3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and impacts confidentiality, integrity, and availability. No patch or official fix information is provided, and the product is not a cloud service.

Successful exploitation of this vulnerability allows an attacker with some privileges to escalate their privileges, potentially gaining full control over the affected system. This can lead to unauthorized access to sensitive data, modification or deletion of data, and disruption of service availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict user privileges to the minimum necessary and review access controls carefully to limit potential exploitation.