Description
CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command.
Remediation
References
Related Vulnerabilities
WordPress Plugin Advanced Post Type Ratings Cross-Site Scripting (1.01)
Dolibarr Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-3991)
Sqlite Improper Initialization Vulnerability (CVE-2020-11655)
WordPress Plugin Events Manager Multiple Cross-Site Scripting Vulnerabilities (5.3.3)