CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beee ACF City Selector acf-city-selector allows Retrieve Embedded Sensitive Data.This issue affects ACF City Selector: from n/a through <= 1.17.0.
Explanation of Vulnerability in Simple Terms
ACF City Selector versions 1.17.0 and earlier expose sensitive information through improper access controls. An unauthenticated attacker can read data that should be restricted, such as configuration details or internal identifiers. The vulnerability requires no user interaction and can be exploited over the network. Update to a version newer than 1.17.0 to remediate.
What an attacker can do
Read sensitive data from the plugin without authentication.
Potential impact on your site
Sensitive plugin data may be exposed to unauthenticated visitors.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
