cs-cart_multivendor vulnerabilities
4 known vulnerabilities in cs-cart_multivendor from Cs-cart. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
cs-cart_multivendor: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on.
- 8.8 High severity
cs-cart_multivendor: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via File Manager/Editor component in the vendor or admin menu.
- 8.8 High severity
cs-cart_multivendor: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information via the product_data parameter in the PDF Add-on.
- 9.8 Critical severity
cs-cart_multivendor: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image upload feature when customizing a shop.