high7.2
CVE-2023-26691
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on.
Impact
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cs-Cart | Cs-Cart Multivendor | Version 4.16.1 |