Threats affecting pkg:github/oscommerce/osCommerce-V4

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.6	EPSS 0.3%	CVE-2024-22724osCommerce-V4 · Code Injection Medium6.6EPSS 0.3%2024-03-21CVE Database V5CVE-2024-22724 An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administrator profile photo upload feature. EPSS 0.3%Vulnerability CWE-94	CVE Database V5	2024-03-21

Page 1 of 1