CVE-2021-38847: S-Cart

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file.

Affected products

• S-Cart S-Cart: up to and including 6.4.1

Published 2021-11-01. Last modified 2026-06-17.