This vulnerability, identified as CWE-201 (Insertion of Sensitive Information Into Sent Data), affects Akshay Menariya Export Import Menus versions <= 1.9.2. It allows unauthenticated attackers to gain access to sensitive information that is improperly included in data sent by the application. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no required privileges or user interaction, impacting confidentiality but not integrity or availability. No official remediation or patch is currently documented, and no known exploits are reported in the wild.

The vulnerability results in unauthorized disclosure of sensitive information without requiring authentication, potentially leading to information leakage. There is no impact on data integrity or availability. The exposure could aid attackers in reconnaissance or further attacks but does not directly compromise system control or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a patch is available, restricting access to the affected application and minimizing exposure of sensitive data in exported or imported menus may reduce risk.