CVE-2024-50801: Abantecart

Medium severity, CVSS 6.0. EPSS: 0.4% chance of exploitation in the next 30 days.

A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/collections.php. The vulnerability is exploitable via the id parameter.

Affected products

• Abantecart Abantecart: version 1.4.0 only

Published 2024-10-31. Last modified 2026-06-17.