Insertion of Sensitive Information into Log File vulnerability

CVE-2024-25095

Summary

The vulnerability allows for the insertion of sensitive information into log files within Easy Forms for Mailchimp. This issue can lead to unintentional disclosure of personal data, potentially exacerbating privacy and security risks for users. The affected versions include all up to 6.9.0. It is crucial for administrators and users to apply necessary updates and restrict access to sensitive logs to mitigate potential exposure.

References