Security issue in CS-Cart - protect your site

[CS-Cart_team]

@dswood

Why is there no mention of SP2 here? I got the notice yesterday and am trying to run the upgrade in the admin panel now.

The announcement has recently been released

Minor security issue in CS-Cart (March 2024)

Hello! Recently we notified you about a major security issue and how to fix it. Since then, we received news of another, unrelated problem. It could allow administrators of your site to elevate their privileges. There are two ways to close the vulnerability: If you are using CS-Cart 4.17.2 SP1, the upgrade to version 4.17.2 SP2 is already available in your Upgrade Center. If you are using an older version, you can still fix the problem. Go to the File area in the Help Desk and find the “Secu…