CVE-2024-52427

ALTO 8.8CVE-2024-52427 · Published 18/11/2024 · updated 17/06/2026

In breve

CVE-2024-52427 è una vulnerabilità ALTO (CVSS 8.8) che riguarda event tickets with ticket scanner (vollstart).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.74%, superiore al 54.8% delle vulnerabilità.
Correzione: aggiornare a 2.3.12 o successiva.

Package	Affected versions	Patched versions
event tickets with ticket scanner vollstart	`< 2.3.12`	`2.3.12`

Description

Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Server Side Include (SSI) Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through <= 2.3.11.

References

patchstack.com/database/Wordpress/Plugin/event-tickets-with-ticket-scanner/vulnerability/wordpress-event-tickets-with-ticket-scanner-plugin-2-3-11-remote-code-execution-rce-vulnerability

Altre vulnerabilità di event tickets with ticket scanner

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

event tickets with ticket scanner

vollstart

< 2.3.12

2.3.12

Altre vulnerabilità di event tickets with ticket scanner

Vedi tutto →