Vulnerability Description
An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Related Weaknesses (CWE)
References
- https://github.com/AbdullahAlmutawa/CVE-2024-50945
- https://github.com/simplcommerce/SimplCommerce
- https://www.simplcommerce.com/
FAQ
What is CVE-2024-50945?
CVE-2024-50945 is a vulnerability with a CVSS score of 7.5 (HIGH). An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the produ...
How severe is CVE-2024-50945?
CVE-2024-50945 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-50945?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.