CVE-2024-9923: Teamplus Team+ Pro

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitrary system files to the website root directory and access them.

Affected products

• Teamplus Team+ Pro: from 13.5.0, before 14.0.0 (fixed in 14.0.0)

Published 2024-10-14. Last modified 2026-06-17.