A vulnerability classified as critical has been found in osCommerce 4. This affects an unknown part. The manipulation leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2024-22724. It is possible to initiate the attack remotely. There is no exploit available.