This vulnerability in SourceCodester Online Clothing Store allows remote attackers to manipulate an unknown functionality of the /_notes/ file component, which involves Dreamweaver Metadata Files, resulting in exposure of file and directory information. The CVSS 4.0 base score is 6.9, reflecting network attack vector, low complexity, no privileges or user interaction required, and low impact on confidentiality. No vendor advisory or patch information is provided, and the vulnerability is publicly disclosed but not known to be exploited in the wild.

Successful exploitation leads to exposure of file and directory information, which could aid attackers in further reconnaissance or targeted attacks. There is no indication of impact on integrity or availability. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround is currently documented. Until a patch is available, limit exposure of the affected component if possible and monitor for updates from the vendor.