CVE-2024-34411

Severity

CRITICAL

CVSS

9.9

EPSS

0.00826

Risk score

39.89

CISA KEV

PoC

Published

2024-05-13

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-34772, GHSA-PRMM-JJM7-HJJW

Products

Thomas Scholl:canvasio3D Light n/a ≤2.5.0

Sources

euvd EUVD-2024-34772

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Thomas Scholl canvasio3D Light.This issue affects canvasio3D Light: from n/a through 2.5.0.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-34772
https://patchstack.com/database/vulnerability/canvasio3d-light/wordpress-canvasio3d-light-plugin-2-5-0-arbitrary-file-upload-vulnerability?_s_id=cve