CVE-2024-40420 Information

Description

A Server-Side Template Injection (SSTI) vulnerability in the edit theme function of openCart project v4.0.2.3 allows attackers to execute arbitrary code via injecting a crafted payload.

Reference

https://github.com/A3h1nt/CVEs/blob/main/OpenCart/Readme.md