critical10.0

CVE-2024-25096

Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc.

Impact

Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3.0.7.

Affected products

Vendor	Product	Affected versions
Canto	Canto	through 3.0.7

Weakness classification

CWE-94

References

NVD record
CVE.org record
https://patchstack.com/database/vulnerability/canto/wordpress-canto-plugin-3-0-6-unauthenticated-remote-code-execution-rce-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/canto/wordpress-canto-plugin-3-0-6-unauthenticated-remote-code-execution-rce-vulnerability?_s_id=cve