Akihiro Hashimoto

**Name of the Vulnerable Software and Affected Versions** Welcart e-Commerce versions 2.7 to 2.8.21 **Description** The issue allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory. **Recommendations** For Welcart e-Commerce versions 2.7 to 2.8.21, consider restricting file upload privileges to authorized users and directories until a patch is available. As a temporary workaround, consider disabling file upload functionality for users with editor or higher privilege until the issue is resolved.