VULNERABILITY INTELLIGENCE

CVE-2024-48779

CVSS score9.8 CRITICAL

EPSS probability0.81%

CISA KEVNot currently listed

Published2024-10-15

Last modified2026-06-17

Description

An issue in Wanxing Technology's Yitu project Management Software 3.2.2 allows a remote attacker to execute arbitrary code via the platformpluginpath parameter to specify that the qt plugin loads the directory.