← Database

CVE-2024-6648

HIGH CVSS: 7.5 Published: 2025-05-08 Modified: 2026-06-17

Description

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system.

Affected Platforms

Apollotheme Ap Pagebuilder

Weakness Type

CWE-22

References