CVE-2024-8945

Name of the Vulnerable Software and Affected Versions: CodeCanyon RISE Ultimate Project Manager version 3.7.0

Description: A critical issue has been identified, affecting the /index.php/dashboard/save file. The id argument is susceptible to SQL injection, allowing for remote attacks.

Recommendations: For CodeCanyon RISE Ultimate Project Manager version 3.7.0, it is recommended to upgrade the affected component to a newer version to mitigate the risk of SQL injection. As a temporary workaround, consider restricting access to the /index.php/dashboard/save endpoint until a patch is available. Avoid using the id argument in the affected endpoint until the issue is resolved.