A vulnerability classified as critical was found in Zen Cart 2.1.0. This vulnerability affects unknown code of the file /zencart/Horse-Kgc-fRizz/index.php?cmd=sqlpatch. The manipulation leads to missing authentication.
This vulnerability was named CVE-2025-8771. The attack can be initiated remotely. Furthermore, there is an exploit available.
The vendor was contacted early about this disclosure but did not respond in any way.
