Code Injection Vulnerability Affects WishList Member X

CVE-2024-37109

What is CVE-2024-37109?

The vulnerability in WishList Member X involves improper control in the generation of code, leading to a Code Injection flaw. This security issue can allow an attacker to execute arbitrary PHP code on breached systems. As a consequence, both the integrity and confidentiality of the affected sites may be at risk. Organizations using versions of WishList Member X prior to 3.26.7 are advised to immediately assess their exposure to this vulnerability and implement necessary updates.

References