CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through <= 4.8.7.1.
Explanation of Vulnerability in Simple Terms
All In One SEO Pack versions up to 4.8.7.1 contain an information disclosure vulnerability. An authenticated user with low privileges can read sensitive data they should not have access to. The vulnerability requires network access and valid login credentials but no additional user interaction. Site administrators should update to a version newer than 4.8.7.1.
What an attacker can do
Read sensitive information they should not have access to.
Potential impact on your site
Authenticated users can view private or restricted data, potentially exposing site configuration or other users' information.
Conditions required to exploit
Valid login account with low-level privileges; network access to the site.
Key dates
External resources
Related vulnerabilities
