high7.2
CVE-2023-40219
Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory.
Impact
Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Welcart | Welcart E-Commerce | from 2.7 through 2.8.21 |