This vulnerability in ZAYTECH Smart Online Order for Clover (versions up to 1.6.0) involves the insertion of sensitive information into data sent by the application, which can lead to unauthorized retrieval of embedded sensitive data. The CVSS 3.1 base score is 7.3, with attack vector network, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. No patch or official remediation level has been provided as of the publication date.

An attacker could exploit this vulnerability remotely without authentication or user interaction to retrieve sensitive information embedded in the data sent by the affected application. This could lead to partial compromise of confidentiality, integrity, and availability of the system or data handled by the application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor for vendor updates and consider limiting exposure of the affected application until a patch is available.