CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through <= 5.0.3.
Explanation of Vulnerability in Simple Terms
PostX versions up to 5.0.3 expose sensitive information that an unauthenticated attacker can read over the network without user interaction. The vulnerability stems from improper exposure of data that should be restricted. Site administrators should update to a version newer than 5.0.3 to mitigate this risk.
What an attacker can do
Read sensitive information from the site without authentication.
Potential impact on your site
Confidential data may be exposed to anyone on the internet who discovers the vulnerable endpoint.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
