This vulnerability in Easy Form Builder arises from missing authorization checks, which allows users with limited privileges to perform actions beyond their intended access level. The issue affects all versions up to and including 3.9.6. The CVSS score of 4.3 reflects a network attack vector with low attack complexity, requiring privileges but no user interaction, and impacts integrity without affecting confidentiality or availability.

The vulnerability allows an attacker with some level of privileges to bypass access controls, potentially modifying data or configurations improperly. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits have been reported, indicating limited current exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations in Easy Form Builder to ensure proper authorization enforcement. Monitor for updates from the vendor regarding patches or official mitigations.