CVE-2024-38294: Alcasar

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

ALCASAR before 3.6.1 allows email_registration_back.php remote code execution.

Affected products

• Alcasar Alcasar: before 3.6.1 (fixed in 3.6.1)

Published 2024-06-13. Last modified 2026-06-17.