Sensitive data (e.g. password, credit cards) is being transmitted over HTTP. An attacker can intercept network traffic and steal the data.

All sensitive data should be transmitted over HTTPS instead of HTTP.

• CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N