Unauthorized Access to Sensitive Information via Missing Authorization in SmartMag

CVE-2024-37930

What is CVE-2024-37930?

A vulnerability in ThemeSphere's SmartMag theme exposes sensitive information to unauthorized parties due to inadequate authorization mechanisms. This flaw permits unauthorized users to access functionality that should be restricted, thereby potentially leading to data breaches. The issue notably affects the SmartMag theme, present in versions up to 9.3.0, where sensitive data can be exploited by unauthorized actors. Users are advised to implement security measures and updates to mitigate the risk associated with this vulnerability.

References