Description

This secure (https) page contains a form that is posting to an insecure (http) page. This could confuse users who may think their data is encrypted when in fact it's not.

Remediation

The form target should point to a secure (https) page.

Related Vulnerabilities

WordPress Plugin WP-Mon Arbitrary File Disclosure (0.5.1)

Golang runtime profiling data

WordPress Plugin Memphis Documents Library Arbitrary File Download (3.1.5)

JetLeak vulnerability

Apache balancer-manager application publicly accessible

Severity

Low

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Sensitive Data Not Over Ssl