Description
OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.
Remediation
References
Related Vulnerabilities
Squid Out-of-bounds Read Vulnerability (CVE-2022-41318)
Joomla CVE-2026-48948 Vulnerability (CVE-2026-48948)
WordPress 4.7.x Arbitrary File Deletion Vulnerability (4.7 - 4.7.10)
Oracle Database Server CVE-2006-0256 Vulnerability (CVE-2006-0256)
OpenSSL Integer Overflow or Wraparound Vulnerability (CVE-2021-23840)