This vulnerability, identified as CWE-862 (Missing Authorization), affects the Online Contact Widget product from wbolt.com in versions up to and including 1.3.0. It allows unauthenticated attackers to bypass access controls, potentially exposing sensitive data or functionality without proper authorization. The CVSS 3.1 base score is 7.5, reflecting high impact on confidentiality with no impact on integrity or availability. The vulnerability is remotely exploitable without privileges or user interaction. No known exploits are reported in the wild, and no vendor advisory or patch information is currently available.

Successful exploitation can lead to unauthorized disclosure of sensitive information due to broken access control. The confidentiality impact is high, while integrity and availability remain unaffected. This could allow attackers to access data or features intended only for authorized users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected widget where possible and monitor for unusual access patterns. Avoid exposing the widget publicly if feasible.