A vulnerability in Sanluan PublicCMS up to 6.202506.e allows manipulation of the userId and deptId arguments in the exportExcel/exportData functionality within CmsContentAdminController. This manipulation bypasses the intended authorization checks, enabling an attacker to export data they should not be able to access. The impact is the loss of confidentiality and integrity of the exported data, effectively granting unauthorized access to sensitive information. The weakness is categorized as an authority downgrade with implications for role-based access control.

The affected product is Sanluan PublicCMS version 6.202506.e and earlier. The flaw resides in the SysUserAdminController component used for exporting data via the CMS content administration interface.

The CVSS score of 5.1 indicates a medium severity level. The EPSS score is not available, but the vulnerability has an available public exploit and can be initiated remotely. The CVE is not listed in CISA's KEV catalog. Attackers can exploit the lack of proper authorization checks by sending crafted requests with modified userId or deptId parameters to bypass access controls and retrieve protected data. Given the public availability of the exploit, the risk to organizations running vulnerable versions is significant and should not be ignored.