CVE-2024-50945

7.5 highEPSS 0.6%

High (7.5). EPSS 0.6% chance of exploitation in the next 30 days.

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2024-12-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/AbdullahAlmutawa/CVE-2024-50945
https://github.com/simplcommerce/SimplCommerce
https://www.simplcommerce.com/

Check your stack JSON