CVE-2023-1124

Description

The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks.

Related CPE's

References

https://wpscan.com/vulnerability/229b93cd-544b-4877-8d9f-e6debda9511c

CvssV3 impact

CvssV2 impact