CVE-2024-48217: Sismart CMS

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-privilege escalation.

Affected products

• Sismart CMS: version 7.4.0 only

Published 2024-11-01. Last modified 2026-06-17.