CVE-2024-24311

HIGH 7.5CVE-2024-24311 · Published 07/02/2024 · updated 17/06/2026

In short

CVE-2024-24311 is a HIGH (CVSS 7.5) vulnerability affecting multilingual and multistore sitemap pro (lineagrafica).
Chance of exploitation in the next 30 days (EPSS): 0.67%, higher than 52.0% of all vulnerabilities.
Fix: update to 1.6.6 or later.

Package	Affected versions	Patched versions
multilingual and multistore sitemap pro lineagrafica	`< 1.6.6`	`1.6.6`

Description

Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" (lgsitemaps) module for PrestaShop before version 1.6.6, a guest can download personal information without restriction.

References

security.friendsofpresta.org/modules/2024/02/06/lgsitemaps.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free