CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP Booking System: from n/a through <= 2.0.19.12.
Explanation of Vulnerability in Simple Terms
WP Booking System versions up to 2.0.19.12 expose sensitive information to unauthenticated attackers over the network. The vulnerability allows disclosure of confidential data without requiring user interaction or special network conditions. The scope is changed, meaning the impact may extend beyond the vulnerable component itself.
What an attacker can do
Read sensitive information from the booking system without authentication.
Potential impact on your site
Confidential booking or user data may be exposed to anyone on the internet.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
