CVE-2024-2759

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper access control vulnerability in Apaczka plugin for PrestaShop allows information gathering from saved templates without authentication.This issue affects Apaczka plugin for PrestaShop from v1 through v4.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-552

Affected software

Vendor	Product	Versions
Alsendo Sp. z o. o.	Apaczka	>= v1, <= v4
prestashopmodules	apaczka	>= 1.0, <= 4.0

References

Timeline

Published: Apr 4, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-275924.3Open Redirect vulnerability in Corezoid Process Engine v6.5.0 allows attackers to redirect to arbitrary websites via appending a crafted lin CVE-2024-275935.4A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated att CVE-2024-27605.5Bkav Home v7816, build 2403161130 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x222240 IOCTL code of the Bkav CVE-2024-276029.1Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api CVE-2024-276049.8Alldata V0.4.6 is vulnerable to Command execution vulnerability. System commands can be deserialized.CVE-2024-276057.5Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users (test) can query information about the users in the system.CVE-2024-276096.5Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel.CVE-2024-27616.8The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at CVE-2024-276126.2Numbas editor before 7.3 mishandles editing of themes and extensions.CVE-2024-276137.3Numbas editor before 7.3 mishandles reading of themes and extensions.CVE-2024-276197.3Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to CVE-2024-27625.4The FooGallery WordPress plugin before 2.4.15, foogallery-premium WordPress plugin before 2.4.15 does not validate and escape some of its G