VULNERABILITY INTELLIGENCE

CVE-2024-28394

CVSS score9.8 CRITICAL

EPSS probability1.18%

CISA KEVNot currently listed

Published2024-03-19

Last modified2026-06-17

Description

An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module.