CVE-2024-50945

Name of the Vulnerable Software and Affected Versions: SimplCommerce version 230310c8d7a0408569b292c5a805c459d47a1d8f

Description: An improper access control issue exists, allowing users to submit reviews without verifying if they have purchased the product. This issue affects the review system, enabling unauthorized users to post reviews for products they have not purchased.

Recommendations: As a temporary workaround, consider disabling the review submission feature until a patch is available. Restrict access to the review system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.