CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Rami Yushuvaev Site Info site-info-dashboard-widget allows Retrieve Embedded Sensitive Data.This issue affects Site Info: from n/a through <= 1.1.
Explanation of Vulnerability in Simple Terms
Site Info versions 1.1 and earlier expose sensitive information to authenticated administrators. An admin with high privileges can read non-public site details through the application. The exposure is limited to confidentiality; no data modification or service disruption occurs. Update to a version newer than 1.1 when available.
What an attacker can do
Read sensitive site information if they have high-level admin access.
Potential impact on your site
Admins with elevated privileges can access information they shouldn't; risk is low if admin accounts are well-controlled.
Conditions required to exploit
Attacker must be authenticated as a high-privilege administrator; no user interaction required.
Key dates
External resources
Related vulnerabilities
