CVE-2023-26691

Name of the Vulnerable Software and Affected Versions CS-Cart MultiVendor version 4.16.1

Description A Directory Traversal vulnerability allows remote attackers to run arbitrary code via a crafted zip file when installing a new add-on. This issue enables attackers to potentially execute malicious code on the affected system.

Recommendations For CS-Cart MultiVendor version 4.16.1, consider disabling the add-on installation feature until a patch is available to prevent exploitation of this vulnerability. Restrict access to the zip file installation process to minimize the risk of arbitrary code execution.