CVE-2024-33274

A Directory Traversal vulnerability exists in FME Modules customfields version v.2.2.7 and before . A remote attacker can exploit the Custom Checkout Fields, Add Custom Fields to Checkout parameter of the ajax.php endpoint to obtain sensitive information . To mitigate this risk, it is recommended...