CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.61% chance of exploitation in the next 30 days, 47th percentile

Published

2024-12-27

Updated

2025-03-18

Proof-of-concept exploits (1)

• AbdullahAlmutawa/CVE-2024-509450★ · 2025-01-02

References

• CVE Record
• NVD entry

Related

• CVE-2024-50944
• CVE-2024-53476
• CVE-2024-5095
• CVE-2024-5094
• CVE-2024-5096
• CVE-2024-5093