CVE-2021-38847

2021-11-0115:15:07

Google

osv.dev

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

JSON

S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file.

CPENameOperatorVersion
coreeq6.2.2.1
coreeq2.1.6
coreeq4.2.0
coreeq6.1.1.0
coreeq6.3.2.3
coreeq3.1-beta2
coreeq6.3.0.2
coreeq4.5.0
coreeq4.3.2
coreeq6.0.6.3