The vulnerability allows a hacker to change a website or extract data, including personal information.