CVE-2022-27435: Ecommerce-Website Project Ecommerce-Website

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component.

Affected products

• Ecommerce-Website Project Ecommerce-Website: version 1.1.0 only

Published 2022-04-04. Last modified 2026-06-17.