This vulnerability in videowhisper's Contact Forms, Live Support, CRM, and Video Messages (versions up to 1.10.2) involves the insertion of sensitive information into sent data, which can be retrieved by an attacker. The issue allows unauthorized access to embedded sensitive data within these modules. No detailed technical exploitation methods or impact scenarios are provided beyond the description of sensitive data retrieval.

The vulnerability could lead to unauthorized disclosure of sensitive information embedded in data sent through the affected videowhisper components. This may compromise confidentiality of user or system data handled by these modules. No evidence of active exploitation or broader impact is currently known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor vendor communications for updates. Until a patch is available, consider limiting exposure of sensitive data through these components where possible.