title: Butterfly Button plugin may leave traces of its use on user's device
description: Butterfly Button plugin may leave traces of its use on user's device. Since it is used for reporting domestic problems, this may lead to spouse knowing about its use.
problem types: Leaves usage trail on user's device
affected:
{
vendor: Butterfly Button
product: Butterfly Button plugin
versions:
version: ., status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector: PHYSICAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
]
solutions: Vendor improved the plugin to make sure it doesn't write data to device. Make sure your site uses the latest plugin.