CVE-2023-26691

Publication date

2024-09-24 00:00:00

Family

mitre

State

PUBLISHED

Description

Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on.