Pawaritsao

**Name of the Vulnerable Software and Affected Versions** OpenCart version 4.0.2.3 **Description** The issue is related to a Server-Side Template Injection (SSTI) vulnerability via the Theme Editor Function. This allows attackers to execute arbitrary code by injecting a crafted payload. **Recommendations** For OpenCart version 4.0.2.3, as a temporary workaround, consider disabling the Theme Editor Function until a patch is available. Restrict access to the Theme Editor to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.