CVE-2023-26690
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Sep 25, 2024
Updated: Sep 26, 2024
CWE ID 434
Summary
CVE-2023-26690 is a file upload vulnerability affecting CS-Cart MultiVendor version 4.16.1. An attacker can exploit this flaw in the File Manager/Editor component, present in both the vendor and admin menus, to upload malicious files and execute arbitrary code remotely. This vulnerability poses a significant risk, allowing unauthorized access and potential data breaches. It is crucial that affected users upgrade to a secure version of CS-Cart MultiVendor as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- CS-Cart Multi-Vendor
Affected Vendors
- CS-Cart