CVE-2024-29320

HIGH 8.1CVE-2024-29320 · Published 30/04/2024 · updated 17/06/2026

In short

CVE-2024-29320 is a HIGH (CVSS 8.1) vulnerability affecting wallos (wallosapp).
Chance of exploitation in the next 30 days (EPSS): 0.67%, higher than 52.1% of all vulnerabilities.
Fix: update to 1.15.3 or later.

Package	Affected versions	Patched versions
wallos wallosapp	`< 1.15.3`	`1.15.3`

Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.15.3

1.15.3

More vulnerabilities in wallos

See all →