This vulnerability involves an unauthenticated insecure direct object reference (IDOR) in RadiusTheme's Review Schema product, versions up to and including 3.1.0. The flaw arises from improper authorization checks when processing user-controlled keys, enabling attackers to bypass authorization controls. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact.

The vulnerability allows an unauthenticated attacker to bypass authorization controls, potentially leading to limited integrity violations such as unauthorized modification or manipulation of review data. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits are reported in the wild.

No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected versions and monitor for suspicious activity related to review schema manipulation.