This vulnerability in ThemeMove EduMall (versions up to and including 4.5.1) is caused by missing authorization checks due to incorrectly configured access control security levels. This could allow users with limited privileges to perform actions that should be restricted, potentially impacting the availability of the system. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and impact limited to availability. No official remediation or patch has been published yet, and no known exploits have been reported.

The vulnerability may allow an attacker with low privileges to cause a denial of service or availability disruption in the affected EduMall system. There is no impact on confidentiality or integrity according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations where possible to limit unauthorized actions. Monitor for vendor updates regarding patches or official mitigations.