CVE-2024-24307 | Product Designer Module prior 1.178.36 on PrestaShop ajaxProcessCropImage path traversal

A vulnerability was found in Product Designer Module on PrestaShop. It has been declared as critical. This vulnerability affects the function ajaxProcessCropImage. The manipulation leads to path traversal.

This vulnerability was named CVE-2024-24307. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.