nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature.
CWE-22