CVE-2015-7880

CVE-2015-7880 describes an information disclosure vulnerability in the Drupal Entity Registration module (7.x-1.x before 7.x-1.5). An attacker with the "Register other accounts" permission can exploit this flaw by knowing usernames to access sensitive event registration data. Rated as Medium severity (CVSS 4.3), this vulnerability requires low privileges and no user interaction, potentially leading to a limited compromise of confidentiality. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.