Description

Sensitive information as part of the error is getting disclosed while viewing comments from “load_module:comments#search=”

Proof of Concept

1. Login to https://demo.microweber.org
2. Visit https://demo.microweber.org/demo/admin/view:modules/load_module:comments#search=
3. Now enter anything in search= parameter you can see 500 internal error with sensitive information

Impact

This vulnerability is capable of leaking sensitive data of the system where the website is hosted