This vulnerability (CWE-532) in FG PrestaShop to WooCommerce allows sensitive information to be written into log files. Such logging of sensitive data can lead to unintended exposure if log files are accessed by attackers or unauthorized users. The issue affects all versions up to 4.45.1. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and limited confidentiality impact. No official patch or vendor advisory detailing remediation is currently available.

The primary impact is the potential exposure of sensitive information through log files. This could lead to confidentiality breaches if logs are improperly accessed. There is no reported impact on integrity or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to log files to trusted personnel only and consider disabling or limiting logging of sensitive information if possible.