Quick answers
- Is CVE-2025-50848 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2025-50848 being exploited in the wild.
- How severe is CVE-2025-50848?
- Medium severity, with a CVSS score of 6.1, published 31 July 2025.
- Which products and versions are affected?
- Cs-Cart 4.18.3.
- Is there a fix for CVE-2025-50848?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2025-50848 attacked?
- It is attacked over the network, in a web application.
- Am I affected by CVE-2025-50848?
- Check whether you run Cs-Cart at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An unrestricted file upload vulnerability exists in CS-Cart 4.18.3 within the File Manager component (vendor.php). The application fails to properly restrict or sanitize the upload of .html files, which are subsequently served by the web server with headers that allow direct browser rendering. A remote attacker can upload a crafted HTML file containing malicious JavaScript or phishing forms. When a victim visits the URL of the uploaded file, the script executes in the context of the trusted domain (Stored XSS), potentially allowing for session hijacking, data theft, or credential harvesting. Mitigation involves implementing server-side file extension filtering and using 'Content-Disposition: attachment' headers for user-uploaded content.
Affected products
- CS-Cart CS-Cart 4.18.3
Timeline
- 2025-07-31: advisory: NVD Published Date
- 2025-07-31: disclosed: Initial disclosure by security researcher