This vulnerability affects CodeAstro Online Job Portal 1.0 and arises from improper access control checks in the job deletion functionality located in /jobs/job-delete.php. By manipulating the ID parameter, an attacker with low privileges can remotely trigger unauthorized deletion of job postings. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. No vendor advisory or patch information is currently available, and the service is not cloud-hosted, so remediation depends on vendor or user action.

Successful exploitation can lead to unauthorized deletion of job postings by remote attackers with low privileges. This may disrupt the availability or integrity of job listings on the portal. There is no evidence of privilege escalation or other impacts beyond improper access control on job deletion. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the job deletion functionality to trusted users only and monitor for suspicious activity related to job deletion requests. Consider implementing additional access control checks or input validation on the ID parameter as a temporary measure.