This vulnerability in CMSMasters Content Composer arises from missing authorization checks, enabling attackers with low privileges to exploit incorrect access control configurations. It affects all versions up to and including 2.5.8. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact. No known exploits are reported in the wild, and no vendor patch or advisory has been provided.

An attacker with low privileges can exploit this vulnerability remotely to gain unauthorized access to sensitive information, resulting in a high confidentiality impact. Integrity impact is low, and availability is not affected. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, monitor vendor channels for updates. Until a fix is released, restrict access to the CMSMasters Content Composer plugin to trusted users only and review access control configurations to minimize exposure.