CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Retrieve Embedded Sensitive Data.This issue affects Smart Online Order for Clover: from n/a through <= 1.6.0.
Explanation of Vulnerability in Simple Terms
Smart Online Order for Clover versions up to 1.6.0 contain a vulnerability that allows unauthenticated attackers to read sensitive data, modify information, or disrupt service availability over the network. No special conditions or user interaction are required to exploit this issue. Organizations using affected versions should update immediately.
What an attacker can do
Read sensitive data, modify information, or disrupt service availability without authentication.
Potential impact on your site
Attackers can access customer data, modify orders, or cause service outages without logging in.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
