CVE-2023-39112

MediumCVSS 6.5

Published: 04/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.58%

43th percentile - higher than 43% of all known CVEs

ECShop version 4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel.

Exploitation of this vulnerability may lead to data loss or deletion of critical system files, jeopardizing system integrity.

It is recommended to upgrade to the latest version of ECShop to mitigate this vulnerability.

Original NVD description (English source)

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel.