Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory.
[
{
"cpes": [
"cpe:2.3:a:coline:welcart_e-commerce:*:*:*:*:*:*:*:*"
],
"vendor": "coline",
"product": "welcart_e-commerce",
"versions": [
{
"status": "affected",
"version": "2.7",
"versionType": "custom",
"lessThanOrEqual": "2.8.21"
}
],
"defaultStatus": "unknown"
}
]