mNt has reported a vulnerability in K&S Shop, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to insecure access restrictions to admin/editor/images.php and can be exploited to upload files with arbitrary extensions and e.g. execute arbitrary PHP code.

Restrict access to the "admin" directory (e.g. via an ".htaccess" file).