Description
Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file
Critical · 9.8
CVE-2024-50658
EUVD-2024-44612GHSA-pj5p-wjjg-q3w5
Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBil…
Published Jan 7, 2025 · Updated Jul 7, 2026 · Assigned by mitre