CVE-2025-50850

CVE-2025-50850 describes a critical vulnerability in CS-Cart 4.18.3, specifically within its vendor login functionality. The absence of CAPTCHA and rate limiting controls allows for unhindered brute-force attacks, enabling unauthorized access to vendor accounts. With a CVSS score of 8.6 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to significant impact on confidentiality, integrity, and availability. While no active exploits, Metasploit modules, or public exploit code are currently available, and community discussion is minimal, the inherent ease of exploitation makes it a notable risk.