Update CVE-2024-50477 template according to review guidelines

- Fix template ID to match CVE
- Add impact and remediation fields
- Add missing classification fields (cvss-metrics, cvss-score, epss-score, epss-percentile, cpe)
- Update tags to follow proper format (cve, cve2024)
- Add vendor/product metadata fields

http/cves/2024/CVE-2024-50477.yaml

@@ -1,4 +1,4 @@
-id: stacks-mobile-app-builder-auth-bypass
+id: CVE-2024-50477
 
 info:
   name: WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass via Account Takeover
@@ -6,16 +6,27 @@ info:
   severity: critical
   description: |
     Stacks Mobile App Builder WordPress plugin ≤ 5.2.3 suffers from an authentication bypass vulnerability via improper handling of query parameters, allowing attackers to impersonate arbitrary users.
+  impact: |
+    An attacker can exploit this vulnerability to bypass authentication and impersonate arbitrary users, potentially gaining administrative access to WordPress installations.
+  remediation: |
+    Update the Stacks Mobile App Builder plugin to the latest version that addresses this vulnerability or remove the plugin if not actively maintained.
   reference:
     - https://github.com/stealthcopter/wordpress-hacking/blob/main/reports/stacks-mobile-app-builder-priv-esc/stacks-mobile-app-builder-priv-esc.md
     - https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/stacks-mobile-app-builder/stacks-mobile-app-builder-523-authentication-bypass-via-account-takeover
   classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+    cvss-score: 9.8
     cve-id: CVE-2024-50477
     cwe-id: CWE-639
+    epss-score: 0.00043
+    epss-percentile: 0.09677
+    cpe: cpe:2.3:a:wpstacksmobile:stacks_mobile_app_builder:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
     max-request: 2
-  tags: wordpress,auth-bypass,account-takeover,wp-plugin,cve-2024-50477,critical
+    vendor: wpstacksmobile
+    product: stacks_mobile_app_builder
+  tags: cve,cve2024,wordpress,auth-bypass,account-takeover,wp-plugin,critical
 
 http:
   - method: GET