CVE-2024-24623: Softaculous Webuzo

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality. A remote, authenticated attacker can exploit this vulnerability to gain code execution on the system.

Affected products

• Softaculous Webuzo: before 4.2.9 (fixed in 4.2.9)

Published 2024-07-25. Last modified 2026-06-17.