I am not sure of the extent because I am not a security researcher and I didn't want to try to exploit it more as an 'amateur' lest I do something illegal. But

I am not sure of the extent because I am not a security researcher and I didn't want to try to exploit it more as an 'amateur' lest I do something illegal. But it is possible there was an exploit at the time.