CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders allows Retrieve Embedded Sensitive Data.This issue affects Barcode Generator for WooCommerce: from n/a through <= 2.0.2.
Explanation of Vulnerability in Simple Terms
Barcode Generator for WooCommerce versions 2.0.2 and earlier expose sensitive data to authenticated users with low privileges. An attacker with a basic user account can read information they should not have access to. The vulnerability requires network access and valid login credentials but no additional user interaction.
What an attacker can do
Read sensitive data they should not have access to with a low-privilege user account.
Potential impact on your site
Customer or staff accounts with basic permissions can view confidential information like pricing, reports, or other restricted data.
Conditions required to exploit
Valid login credentials with low-level user privileges; network access to the site.
Key dates
External resources
Related vulnerabilities
