This vulnerability involves missing authorization checks in the MWP Development Diet Calorie Calculator, allowing unauthorized users to exploit improperly configured access control mechanisms. It affects versions up to and including 1.1.1. The CVSS 3.1 base score is 5.3, indicating a medium severity level, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity. No patch or official fix has been documented, and the product is not a cloud service.

The vulnerability allows unauthorized modification or manipulation of data within the Diet Calorie Calculator application, potentially leading to integrity issues. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor vendor communications for updates. Until a patch is available, restricting access to the affected application and reviewing access control configurations may help reduce risk.