CVE-2024-8332

CRITICAL 9.8CVE-2024-8332 · Published 30/08/2024 · updated 17/06/2026

In short

CVE-2024-8332 is a CRITICAL (CVSS 9.8) vulnerability affecting sweet-cms (master-nan).
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.6% of all vulnerabilities.
Fix: update to 2024-08-28 or later.

Package	Affected versions	Patched versions
sweet-cms master-nan	`< 2024-08-28`	`2024-08-28`

Description

A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been declared as critical. This vulnerability affects unknown code of the file /table/index. The manipulation leads to sql injection. The attack can be initiated remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 146359646a5a90cb09156dbd0013b7df77f2aa6c. It is recommended to apply a patch to fix this issue.

References

master-nan/sweet-cms commit 1463596 · Patch
master-nan/sweet-cms · Exploit
master-nan/sweet-cms · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Exploit

More vulnerabilities in sweet-cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free