CVE-2022-30423

9.8 criticalEPSS 1.9%

Critical (9.8) in merchandise online store project merchandise online store. EPSS 1.9% chance of exploitation in the next 30 days.

Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2022-06-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

merchandise_online_store_project:merchandise_online_store

References

https://github.com/ffYYy6x0y1/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/RCE-1.md
https://github.com/ffYYy6x0y1/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/RCE-1.md

Check your stack JSON