CVE-2024-9921: Teamplus Team+ Pro

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify and delete database contents.

Affected products

• Teamplus Team+ Pro: from 13.5.0, before 14.0.0 (fixed in 14.0.0)

Published 2024-10-14. Last modified 2026-06-17.