CVE-2023-24377

ALTO 8.8CVE-2023-24377 · Published 14/02/2023 · updated 17/06/2026

En resumen

CVE-2023-24377 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a ecwid ecommerce shopping cart (lightspeedhq).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.26%, mayor que el 18.3% de las vulnerabilidades.
Solución: actualizar a 6.11.4 o posterior.

Package	Affected versions	Patched versions
ecwid ecommerce shopping cart lightspeedhq	`< 6.11.4`	`6.11.4`

Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin <= 6.11.3 versions.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 6.11.4

6.11.4

Más vulnerabilidades de ecwid ecommerce shopping cart

Ver todo →