high8.8
CVE-2018-3758
Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine.
Impact
Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Express-Cart Project | Express-Cart | before 1.1.7 |