CVE-2023-1558

9.8 criticalEPSS 0.7%

Critical (9.8) in simple and beautiful shopping cart system project simple and beautiful shopping cart system. EPSS 0.7% chance of exploitation in the next 30 days.

A vulnerability classified as critical has been found in Simple and Beautiful Shopping Cart System 1.0. This affects an unknown part of the file uploadera.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223551.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-03-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

simple_and_beautiful_shopping_cart_system_project:simple_and_beautiful_shopping_cart_system

References

https://github.com/nightcloudos/bug_report/blob/main/simple%20and%20beautiful%20shopping%20cart%20system/simple%20and%20beautiful%20shopping%20cart%20system%20uploadera.php%20has%20a%20file%20upload%20vulnerability.pdf
https://vuldb.com/?ctiid.223551
https://vuldb.com/?id.223551
https://github.com/nightcloudos/bug_report/blob/main/simple%20and%20beautiful%20shopping%20cart%20system/simple%20and%20beautiful%20shopping%20cart%20system%20uploadera.php%20has%20a%20file%20upload%20vulnerability.pdf
https://vuldb.com/?ctiid.223551

Check your stack JSON