CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Thomas Maier Image Source Control Lite – Show Image Credits and Captions.This issue affects Image Source Control Lite – Show Image Credits and Captions: from n/a through 2.17.0.
Explanation of Vulnerability in Simple Terms
Image Source Control Lite exposes sensitive information that should not be publicly accessible. An unauthenticated attacker on the network can retrieve this data without user interaction. The vulnerability affects versions up to 2.17.0. Update to a version newer than 2.17.0 to resolve the issue.
What an attacker can do
Read sensitive information that the plugin stores or exposes without proper access controls.
Potential impact on your site
Sensitive data may be exposed to anyone visiting your site or scanning it remotely.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
