CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through <= 2.2.6.
Explanation of Vulnerability in Simple Terms
Review Schema by RadiusTheme contains a flaw that allows authenticated users to read sensitive data they should not have access to. The vulnerability affects versions up to 2.2.6 and requires a valid user account to exploit. No code execution or data modification is possible through this issue. Site administrators should update to a patched version when available.
What an attacker can do
Read sensitive information accessible only to higher-privilege users or other accounts.
Potential impact on your site
User data and sensitive information may be exposed to authenticated attackers with basic account access.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges on the site.
Key dates
External resources
Related vulnerabilities
