This vulnerability, identified as CWE-201, affects Spotlight - Social Media Feeds (Premium) up to version 1.7.1. It allows sensitive information to be inserted into data sent by the application, which can then be retrieved by an attacker. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without authentication or user interaction, with a low complexity attack. The impact is limited to confidentiality loss (partial disclosure of sensitive data) without integrity or availability impact. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability could lead to partial disclosure of sensitive information embedded in sent data, potentially exposing confidential data to unauthorized parties. There is no indication of impact on data integrity or system availability. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor vendor communications for updates. Until a patch is available, consider limiting exposure of sensitive data in communications and review application configurations to minimize sensitive data leakage where possible.