CVE-2023-4547

What this means for your business

• It affects Spa-Cart Ecommerce Cms. It matters if your company, or a supplier that handles your data, runs it.
• Code showing how to exploit it has been published, but real attacks have not been confirmed.
• An attacker can use it remotely, over a network, with an ordinary user login, but only after tricking someone into an action such as opening a file or a link.
• FIRST's prediction model gives it a 64% chance of attack attempts being seen in the next 30 days, ranking above 99% of all known flaws.

What to do

1. 1Check whether your company or your suppliers run Spa-Cart Ecommerce Cms, and which version. The affected versions are listed further down this page.
2. 2If you do, follow the vendor's guidance. No patch reference has been published yet.