CVE-2024-50477
CRITICAL NUCLEIStacksmarket Stacks Mobile App Builder - Missing Authentication
Title source: ruleDescription
Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Authentication Bypass.This issue affects Stacks Mobile App Builder: from n/a through 5.2.3.
Exploits (2)
exploitdb
WORKING POC
by stealthcopter · textwebappsmultiple
https://www.exploit-db.com/exploits/52357
Nuclei Templates (1)
WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass
CRITICALVERIFIEDby stealthcopter,vijay-sutar
Scores
CVSS v3
9.8
EPSS
0.7900
EPSS Percentile
99.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-306
CWE-288
Status
published
Affected Products (1)
stacksmarket/stacks_mobile_app_builder
< 5.2.3
Timeline
Published
Oct 28, 2024
Tracked Since
Feb 18, 2026