Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

Kids Online Store allows malicious files to be uploaded to server

CVE-2026-40750 · published 4 months ago
Summary

A security issue in Kids Online Store allows attackers to upload malicious files, potentially allowing them to take control of the website. This could happen if an attacker uploads a malicious file, known as a web shell, which would give them unauthorized access to the server. Users should update to a fixed version of the software to prevent this issue.

Original advisory text
Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server. This issue affects Kids Online Store: from n/a through ...
Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server.

This issue affects Kids Online Store: from n/a through 0.8.9.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.9 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-434Unrestricted File Upload
Timeline
Published16 Jun 2026
Updated3 Nov 2026
First seen16 Jun 2026
Sources
CVE-2026-40750 · NVD
Track software like this
Free during beta