CVE-2026-42746
HighSummary
The vulnerability in ZAYTECH Smart Online Order for Clover allows the leakage of sensitive data by embedding it in sent data. This issue affects versions from n/a through 1.6.0 inclusive.
Risk Assessment
Organizations may be exposed to the disclosure of sensitive information, potentially leading to breaches of privacy and data security.
Recommendation
It is recommended to update to the latest version of ZAYTECH Smart Online Order for Clover to mitigate this vulnerability.
Other vulnerabilities in ZAYTECH Smart Online Order for Clover
See all- CVE-2026-42745High
CVE-2026-42745 describes an authentication bypass vulnerability in ZAYTECH Smart Online Order for Clover. This issue affects versions from n/a through 1.6.0 inclusive.
- CVE-2026-42738High
CVE-2026-42738 describes an improper neutralization of input during web page generation, leading to Stored XSS vulnerabilities in the ZAYTECH Smart Online Order for Clover application. This issue affects versions from n/a through 1.6.0.
Original NVD description (English source)
Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Retrieve Embedded Sensitive Data.This issue affects Smart Online Order for Clover: from n/a through <= 1.6.0.