high8.8
CVE-2024-24622
Softaculous Webuzo contains a command injection in the password reset functionality.
Impact
Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker can exploit this vulnerability to gain code execution on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softaculous | Webuzo | before 4.2.9 |