critical9.6
CVE-2024-38293
ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php.
Impact
ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alcasar | Alcasar | before 3.6.1 |