CVE-2024-28395

A SQL injection vulnerability exists in Best-Kit bestkit_popup version 1.7.2 and before . The flaw is located in the bestkit_popup.php component and allows a remote attacker to escalate privileges . To mitigate this risk, it is recommended to update to a version later than 1.7.2, although specifi...