This vulnerability in Crocoblock JetMenu allows an attacker with low privileges and network access to cause sensitive information to be inserted into data sent by the plugin, which can then be retrieved. The issue affects JetMenu versions up to and including 2.4.11.1. The CVSS vector indicates that the attack complexity is low, no user interaction is required, and the confidentiality impact is high, while integrity and availability are not affected. No official patch or remediation details are provided in the available data.

An attacker with low privileges and network access could exploit this vulnerability to retrieve sensitive information embedded in data sent by the JetMenu plugin. This could lead to unauthorized disclosure of sensitive data, impacting confidentiality. There is no indication of impact on integrity or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Crocoblock's advisories for updates. Until a fix is available, consider limiting access to the affected plugin features to trusted users only.