CVE-2023-43610

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce versions 2.7 to 2.8.21

Description The issue allows a user with editor or higher privilege to perform unintended database operations due to a SQL injection vulnerability in the Order Data Edit page.

Recommendations For Welcart e-Commerce versions 2.7 to 2.8.21, consider restricting access to the Order Data Edit page until a patch is available. As a temporary workaround, limit the privileges of users with editor or higher roles to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.