CVE-2024-50527

Severity

CRITICAL

CVSS

10.0

EPSS

0.00515

Risk score

40.18

CISA KEV

PoC

Published

2024-11-04

Modified

2026-05-11

First seen

2026-08-07

Aliases

EUVD-2024-44940, GHSA-WVC6-C72C-8M45

Products

Stacks:Stacks Mobile App Builder 0 ≤5.2.3

Sources

euvd EUVD-2024-44940

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Upload a Web Shell to a Web Server.This issue affects Stacks Mobile App Builder: from n/a through <= 5.2.3.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-44940
https://patchstack.com/database/Wordpress/Plugin/stacks-mobile-app-builder/vulnerability/wordpress-stacks-mobile-app-builder-plugin-5-2-3-arbitrary-file-upload-vulnerability?_s_id=cve