CVE-2022-30381

Impact

Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggers_merch/classes/Master.php?f=delete_img.

Affected products

References

• NVD record
• CVE.org record
• https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/delet-file-1.md
• https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/delet-file-1.md