CVE-2024-24548: Estore-Wss Payment Ex

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Payment EX Ver1.1.5b and earlier allows a remote unauthenticated attacker to obtain the information of the user who purchases merchandise using Payment EX.

Affected products

• Estore-Wss Payment Ex: up to and including 1.1.5b

Published 2024-02-01. Last modified 2026-06-17.