CVE-2023-45384

Name of the Vulnerable Software and Affected Versions KnowBand supercheckout versions 5.0.7 through 6.0.7

Description The issue allows a guest to upload files with dangerous extensions, such as .php, in the "Module One Page Checkout, Social Login & Mailchimp" (supercheckout) module.

Recommendations For KnowBand supercheckout versions 5.0.7 through 6.0.7, consider restricting file uploads to prevent exploitation until a patch is available. As a temporary workaround, restrict access to the "Module One Page Checkout, Social Login & Mailchimp" (supercheckout) module to minimize the risk of exploitation.