CVE-2024-56889: Codeastro Complaint Management System

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter.

Affected products

• Codeastro Complaint Management System: version 1.0 only

Published 2025-02-06. Last modified 2026-06-17.