CVE-2026-36767

Name of the Vulnerable Software and Affected Versions shopizer version 3.2.5

Description A path traversal issue in the '/content/images/add' endpoint allows attackers to write arbitrary files to any writable path using a crafted POST request. Path traversal is a technique that allows an attacker to access or manipulate files and directories outside the intended folder on a server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.