OpenCart owner turns air blue after researcher discloses serious vuln

"turn the air blue": to swear a lot (= use rude words), or to involve a lot of swearing

So the "vulnerability" requires the attacker to already have admin privileges? Then the OpenCart maintainer is right, and the reporters and this article are wrong.