CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through <= 4.8.6.1.
Explanation of Vulnerability in Simple Terms
All In One SEO Pack versions up to 4.8.6.1 contain an information disclosure vulnerability. An authenticated user with low privileges can read sensitive data they should not have access to. The vulnerability requires network access and no user interaction beyond the attacker's own actions. Update to a version newer than 4.8.6.1 to resolve this issue.
What an attacker can do
Read sensitive data accessible only to higher-privileged users or other restricted information.
Potential impact on your site
User data, configuration details, or other sensitive information may be exposed to low-privilege site members.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or contributor role).
Key dates
External resources
