This vulnerability involves a path traversal issue in Shopizer v3.2.5's /content/images/add endpoint. An attacker can exploit this by crafting a POST request that writes files to arbitrary writable locations on the server. The vulnerability is publicly known but lacks a CVSS score and official remediation details. No cloud service is involved, and no known exploits have been reported.

Successful exploitation allows an attacker to write arbitrary files to any writable path on the affected system. This could enable unauthorized modification or addition of files, potentially leading to further system compromise depending on the context and permissions of the writable directories.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable endpoint and limit write permissions on the server to mitigate potential exploitation.