EPSS
Percentile
91.1%
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.
packetstormsecurity.com/files/161613/Zen-Cart-1.5.7b-Remote-Code-Execution.html
github.com/MucahitSaratar/zencart_auth_rce_poc
github.com/zencart/zencart
github.com/zencart/zencart/commit/7447627f7148b11c614f89dab4a09d3f102b58af
nvd.nist.gov/vuln/detail/CVE-2021-3291