VULNERABILITY INTELLIGENCE

CVE-2024-28392

CVSS score9.8 CRITICAL

EPSS probability0.62%

CISA KEVNot currently listed

Published2024-03-20

Last modified2026-06-17

Description

SQL injection vulnerability in pscartabandonmentpro v.2.0.11 and before allows a remote attacker to escalate privileges via the pscartabandonmentproFrontCAPUnsubscribeJobModuleFrontController::setEmailVisualized() method.