FADI MED Editor Wysiwyg Background Color Plugin Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the FADI MED Editor Wysiwyg Background Color plugin, specifically in versions through 1.0. This vulnerability arises from missing authorization checks, allowing unprivileged users to exploit improperly configured access control security levels.

Impact

Exploitation of this vulnerability could lead to unauthorized users performing actions that require higher privileges, potentially allowing them to manipulate content or settings they should not have access to.

Remediation

Users of the FADI MED Editor Wysiwyg Background Color plugin are advised to update to a version beyond 1.0, as no official fix is currently available. However, a virtual patch is offered through Patchstack to mitigate this vulnerability until an official update can be applied.