Business and Enterprise Solutions

In WordPress versions up to 2.1.0 a medium severity vulnerability CVE-2024-7848 was detected. This vulnerability allows authenticated users, even with low-level access, to access other users’ private files due to improper validation. To fix this issue, users must upgrade WordPress to the latest version. For more details, visit: https://nvd.nist.gov/vuln/detail/CVE-2024-7848.

In Joomla versions 3.0.0-3.10.16-elts, 4.0.0-4.4.6, and 5.0.0-5.1.2 a low severity vulnerability CVE-2024-40743 was detected. The stripImages and stripIframes methods didn’t handle inputs correctly, allowing for XSS attacks. To fix this problem, users should upgrade to version 3.10.17-elts, 4.4.7, or 5.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-40743.

In Joomla versions 3.4.6-3.10.16-elts, 4.0.0-4.4.6, and 5.0.0-5.1.2 a low severity vulnerability CVE-2024-27184 was detected. If a URL isn’t carefully checked, it might not be clear whether a link is leading someone to a safe, internal page or an external, potentially risky site. To fix this problem, users should upgrade to version 3.10.17-elts, 4.4.7, or 5.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-27184.

In Joomla versions 3.0.0-3.10.16-elts, 4.0.0-4.4.6, 5.0.0-5.1.2 a critical severity vulnerability CVE-2024-27185 was detected. The pagination class incorporates arbitrary parameters into links, potentially enabling cache poisoning attacks. To fix this problem, users should upgrade to version 3.10.17-elts, 4.4.7, or 5.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-27185.

In Joomla versions 4.0.0-4.4.6 and 5.0.0-5.1.2 a medium severity vulnerability CVE-2024-6322 was detected. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. To fix the issue, users must upgrade Joomla to version 4.4.7 or 5.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-27186.

In WooCommerce versions prior from n/a through 9.1.2 a medium severity vulnerability CVE-2024-39666 was detected. This security flaw allows hackers to insert harmful code into web pages. To fix this problem, users should upgrade to WooCommerce version 9.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-39666.

In Ghost versions from 4.46.0 before 5.89.4 a medium severity vulnerability CVE-2024-43409 was detected. This vulnerability allows attackers to access member-only information and perform actions meant for registered users, potentially exposing personal data. To fix this problem, users should upgrade Ghost to version 5.89.5. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-43409.

In Joomla! CMS versions 4.0.0-4.4.6, 5.0.0-5.1.2 a high severity vulnerability CVE-2024-27187 was detected. Improper access controls allow backend users to overwrite their usernames, even when this action is disallowed. To fix this vulnerability, users need to upgrade to version 4.4.7 or 5.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-27187.

In Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier a high severity vulnerability CVE-2024-39406 was detected. This vulnerability allows attackers to perform Path Traversal, potentially leading to arbitrary file system read. To address this issue, it is recommended to apply the latest security patches. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-39406.