CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a through < 3.6.2.
Explanation of Vulnerability in Simple Terms
Sunshine Photo Cart versions 3.6.2 and earlier expose sensitive information to unauthenticated attackers over the network. An attacker can read non-critical data without authentication or user interaction. The vulnerability has a CVSS score of 5.3 (medium severity) and affects all versions up to 3.6.2.
What an attacker can do
Read sensitive information without authentication.
Potential impact on your site
Sensitive data may be exposed to anyone on the internet without requiring login.
Conditions required to exploit
Network access to the affected Sunshine Photo Cart installation.
Key dates
External resources
Related vulnerabilities
