CVE-2025-62143
Medium · 4.3CVSS
4.3
EPSS
0.2%
Published
Dec 31, 2025
CISA due date
—
The record
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n/a through <= 1.163.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-109823 An attacker can read the name of filesystem paths of your application present via… CWE-497
- CVE-2026-111079 A flaw was found in Goose. CWE-497
- CVE-2026-111946 Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode… CWE-497
- CVE-2026-96865 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-85866 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83909 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83907 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83905 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497