CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Retrieve Embedded Sensitive Data.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5.
Explanation of Vulnerability in Simple Terms
RT-Theme 18 Extensions versions 2.5 and earlier expose sensitive information that can be read over the network without authentication. An attacker can retrieve this data directly without needing to log in or interact with a user. The vulnerability affects the theme extension component and may expose configuration details or other non-critical information.
What an attacker can do
Read sensitive information from the site without logging in.
Potential impact on your site
Sensitive data may be exposed to unauthenticated visitors; assess what information is at risk.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
