CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RebelCode Spotlight Social Media Feeds spotlight-social-photo-feeds allows Retrieve Embedded Sensitive Data.This issue affects Spotlight Social Media Feeds: from n/a through <= 1.7.1.
Explanation of Vulnerability in Simple Terms
Spotlight Social Media Feeds versions 1.7.1 and earlier expose sensitive information through improper exposure of internal data. An attacker on the network can read non-public information without authentication or user interaction. The vulnerability affects confidentiality but not data integrity or availability. Update to a version newer than 1.7.1 to resolve this issue.
What an attacker can do
Read non-public information from the plugin without authentication.
Potential impact on your site
Sensitive data may be exposed to unauthenticated visitors or automated scanners.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
