CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator simple-price-calculator-basic allows Retrieve Embedded Sensitive Data.This issue affects Simple Price Calculator: from n/a through <= 1.3.
Explanation of Vulnerability in Simple Terms
Simple Price Calculator versions 1.3 and earlier contain an information disclosure vulnerability. An attacker with low-level user privileges can read sensitive data they should not have access to. The vulnerability requires network access but no user interaction. No integrity or availability impact occurs.
What an attacker can do
Read sensitive data accessible through the application that should be restricted from their user role.
Potential impact on your site
Users' sensitive information may be exposed to other registered users with low-level accounts.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; network access required.
Key dates
External resources
Related vulnerabilities
