CVE-2024-50492 – WordPress ScottCart plugin <= 1.1 - Remote Code Execution (RCE) vulnerability

https://notcve.org/view.php?id=CVE-2024-50492

25 Oct 2024 — Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson ScottCart allows Code Injection.This issue affects ScottCart: from n/a through 1.1. The WordPress eCommerce – ScottCart plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to execute code on the server. WordPress ScottCart plugin versions 1.1 and below suffer from a remote code execution vulnerability. • https://packetstorm.news/files/id/190039 • CWE-94: Improper Control of Generation of Code ('Code Injection') •