A vulnerability classified as critical has been found in CS-Cart MultiVendor 4.16.1. This affects an unknown part of the component File Manager. The manipulation leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2023-26690. It is possible to initiate the attack remotely. There is no exploit available.