This vulnerability in Welcart e-Commerce (usc-e-shop) arises from improper limitation of pathnames to restricted directories, enabling path traversal attacks. It affects versions up to 2.11.13. The CVSS 3.1 score is 6.8, reflecting a network attack vector with low attack complexity but requiring high privileges and no user interaction. The impact is limited to availability, with no confidentiality or integrity loss. No patch or vendor advisory details are provided in the input.

An attacker with high privileges can exploit this path traversal vulnerability to affect the availability of the Welcart e-Commerce plugin, potentially causing denial of service. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict high-privilege access to trusted users only to reduce risk. Monitor official Welcart channels for updates.