Description OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function. Remediation References CVE-2024-36694 Related Vulnerabilities ASP.NET MVC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4075) Squid Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2018-19132) WordPress Plugin Donation Block For PayPal Unspecified Vulnerability (1.0.0) Varnish Cache Other Vulnerability (CVE-2013-4090) SharePoint CVE-2022-38009 Vulnerability (CVE-2022-38009) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-94 CVE-2024-36694