Skip to content
OpenAdvisories

Vendor

MahoCommerce

1 known vulnerabilities.

Products

maho 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-58449

    Maho Vulnerable to Authenticated Remote Code Execution via File Upload

    Maho is a free and open source ecommerce platform. In Maho prior to 25.9.0, an authenticated staff user with access to the `Dashboard` and `Catalog\Manage Products` permissions can create a custom option on a listing with a file input field. By allowing file …

    MahoCommerce maho mahocommerce/maho Packagist