MahoCommerce vulnerabilities
We track 1 vulnerability in MahoCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 8, 2025.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest MahoCommerce vulnerabilities
- 8.7 High severity
maho: Reliance on File Name or Extension of Externally-Supplied File
Maho is a free and open source ecommerce platform. In Maho prior to 25.9.0, an authenticated staff user with access to the `Dashboard` and `Catalog\Manage Products` permissions can create a custom option on a listing with a file input field. By allowing file u