CVE-2022-30423: Merchandise Online Store Project Merchandise Online Store

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.

Affected products

Published 2022-06-02. Last modified 2026-06-17.