CVE-2024-31823

CriticalCVSS 9.8

Published: 29/04/2024(UTC)Updated: 24/08/2026(UTC)Translated: 24/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.64%

75th percentile - higher than 75% of all known CVEs

Summary

A vulnerability in Ecommerce-CodeIgniter-Bootstrap allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component.

Risk Assessment

An attacker can take control of the e-commerce application, potentially leading to data theft, content modification, or full server compromise.

Recommendation

Apply the vendor's patch or update the software to the latest version that fixes this vulnerability.

Original NVD description (English source)

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component.