CVE-2023-26686

File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image upload feature when customizing a shop.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2024-09-25

Last modified

2024-09-24

Weaknesses

CWE-434

Affected products

• Cs-cart Multivendor (Cs-cart)

References

• https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26686%20-%20File%20Upload%20vulnerability%20in%20product%20image%…
• https://www.cs-cart.com/multivendor.html