← Back to browse · API

CVE-2024-24112

Severity
CRITICAL
CVSS
9.8
EPSS
0.03348
Risk score
40.37
CISA KEV
No
PoC
No
Published
2024-02-06
Modified
2025-05-08
First seen
2026-08-07
Aliases
EUVD-2024-21537, GHSA-QV88-9X4P-QM78
Products
n/a:n/a, n/a:n/a n/a
Sources
euvd EUVD-2024-21537

Description

xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.

References