A flaw in the job deletion handler of CodeAstro Online Job Portal allows attackers to manipulate the job ID parameter and delete postings without proper authorization. This improper access control can lead to unauthorized removal of job listings, resulting in data loss, loss of business credibility, and potential service disruption. The vulnerability is classified under Permissions, Privileges, and Access Controls and Improper Access Control weaknesses.

Affected systems include CodeAstro Online Job Portal version 1.0. The flaw resides in the file /jobs/job-delete.php and impacts any installation of this version that has the endpoint publicly accessible. No other product versions are listed in the CVE.

The CVSS base score of 5.3 indicates a moderate severity, and the lack of an EPSS score leaves its exploitation probability uncertain. Since the vulnerability can be triggered remotely via crafted HTTP requests, it is likely that an attacker only needs to know a valid job ID. The vulnerability is not listed in the KEV catalog, so no known exploits are reported, but the presence of a public exploit code raises concern. Timely remediation is advised.