CVE-2024-50658

Publication date

2025-01-07 00:00:00

Family

mitre

State

PUBLISHED

Description

Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file