CRITICALCVSS 9.8Vulnerability

CVE-2024-31823

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component.

Properties

Severity
CRITICAL
Cvss severity
CRITICAL
Cvss score
9.8
Epss score
0.01673
Retrieved at
2026-10-21T01:24:47+00:00
Last source
FIRST EPSS
Score
9.8
Cve id
CVE-2024-31823
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In Signal since
initial import (Sep 2026)
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published at
2024-04-29T18:15:07.880
Last modified
2026-08-24T14:16:48.237
Epss percentile
0.7651

Related Entities (2)

AFFECTS_PRODUCT (1)

→[Product]cpe:2.3:a:ecommerce-codeigniter-bootstrap_project:ecommerce-codeigniter-bootstrap:2024-01-02:*:*:*:*:*:*:*

HAS_WEAKNESS (1)

→[Weakness]Improper Control of Generation of Code ('Code Injection')

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2024-31823 (CVSS 9.8) — Ninja Signal Threat Intelligence | Ninja Signal