CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-46820

CVE-2021-46820 affects the XOS-Shop system (xos_shop_system 1.0.9). The issue is an arbitrary file deletion vulnerability exploitable via the current_manufacturer_image parameter to /shop/admin/categories.php. The connected sources confirm the affected product and the vulnerable parameter but do ...