The vulnerability CVE-2024-50492 in ScottCart (versions <= 1.1) is an improper control of code generation issue categorized as code injection. It allows remote attackers to inject and execute arbitrary code without requiring privileges or user interaction. The CVSS 3.1 base score is 8.3 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or mitigation details are currently available from the vendor.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code on the affected system, leading to partial loss of confidentiality, integrity, and availability of the system running ScottCart. This could result in unauthorized access, data manipulation, or service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected application and monitor for unusual activity related to ScottCart. Avoid exposing the affected versions publicly if possible.