Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory.Referenceshttps://www.welcart.com/archives/20106.htmlhttps://jvn.jp/en/jp/JVN97197972/
