This vulnerability in CodePeople Contact Form Email (up to version 1.3.44) involves the exposure of sensitive information to unauthorized actors, categorized as CWE-200. The CVSS 3.1 base score of 5.3 indicates an attacker can exploit this remotely without privileges or user interaction, resulting in limited confidentiality impact. No official fix or patch has been disclosed, and no known active exploitation has been reported.

An attacker can remotely access sensitive information that should be protected, potentially leading to information disclosure. The impact is limited to confidentiality with no integrity or availability effects. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected component or implementing compensating controls to limit exposure of sensitive data.