This vulnerability in Web Mumbai WM Options Import Export (<= 1.0.1) allows an attacker to retrieve embedded sensitive information by inserting it into data sent by the application. It is remotely exploitable without authentication or user interaction, affecting confidentiality but not integrity or availability. The CVSS vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact.

Successful exploitation results in unauthorized disclosure of sensitive information embedded in sent data. There is no impact on data integrity or system availability. This could lead to exposure of confidential data, potentially compromising privacy or security depending on the nature of the sensitive information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, consider restricting access to the affected component and monitoring for unusual data transmissions that may indicate exploitation attempts.