CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetElements For Elementor jet-elements allows Retrieve Embedded Sensitive Data.This issue affects JetElements For Elementor: from n/a through <= 2.7.7.
Explanation of Vulnerability in Simple Terms
JetElements For Elementor versions up to 2.7.7 expose sensitive information to authenticated users. A logged-in attacker with low privileges can read data they should not have access to. The vulnerability requires a valid user account but no additional user interaction. Update to a version newer than 2.7.7 to resolve this issue.
What an attacker can do
Read sensitive data they should not have access to as a low-privilege user.
Potential impact on your site
User data or site configuration may be exposed to any authenticated user, even those with minimal permissions.
Conditions required to exploit
Attacker must have a valid user account with low privileges on the site.
Key dates
External resources
