CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extensions For CF7: from n/a through <= 3.4.0.
Explanation of Vulnerability in Simple Terms
Extensions For CF7 versions 3.4.0 and earlier contain an information disclosure vulnerability. An attacker on the network can read sensitive data without authentication or user interaction. The vulnerability affects the plugin's handling of data exposure, allowing unauthorized access to confidential information stored or processed by the extension.
What an attacker can do
Read sensitive information from the site without logging in.
Potential impact on your site
Visitor or customer data may be exposed to unauthenticated attackers over the network.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
