agentprime: cubecart-v6Every new CVE for cubecart-v6.https://agentprime.io/CVE-2026-54645: CubeCart: Stored XSS in Product Description Editor via Global Sanitizer Bypasshttps://agentprime.io/advisories/CVE-2026-54645/https://agentprime.io/advisories/CVE-2026-54645/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 22:06:28 GMTCVECVE-2026-54643: CubeCart: Missing Authorization Check for Order Note Deletion in orders.index.inc.phphttps://agentprime.io/advisories/CVE-2026-54643/https://agentprime.io/advisories/CVE-2026-54643/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 22:05:28 GMTCVECVE-2026-54642: CubeCart: CSRF Protection Missing for Download Resets and Card Deletions in orders.index.inc.phphttps://agentprime.io/advisories/CVE-2026-54642/https://agentprime.io/advisories/CVE-2026-54642/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 22:04:40 GMTCVECVE-2026-54644: CubeCart: XSS via Anchor Tag Attribute Injection in gui.class.php Message Systemhttps://agentprime.io/advisories/CVE-2026-54644/https://agentprime.io/advisories/CVE-2026-54644/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 22:03:41 GMTCVECVE-2026-54647: CubeCart : SQL Injection via download_expire Parameter in settings.index.inc.phphttps://agentprime.io/advisories/CVE-2026-54647/https://agentprime.io/advisories/CVE-2026-54647/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 22:02:48 GMTCVECVE-2026-54646: CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.phphttps://agentprime.io/advisories/CVE-2026-54646/https://agentprime.io/advisories/CVE-2026-54646/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 22:01:53 GMTCVECVE-2026-54648: CubeCart: Missing Authorization Check in customers.gdpr.inc.php Leads to Unauthorized Customer Data Deletionhttps://agentprime.io/advisories/CVE-2026-54648/https://agentprime.io/advisories/CVE-2026-54648/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 22:01:04 GMTCVECVE-2026-45708: CubeCart: Authenticated RCE via Invoice Template → Order Printhttps://agentprime.io/advisories/CVE-2026-45708/https://agentprime.io/advisories/CVE-2026-45708/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 20:46:51 GMTCVECVE-2026-45055: CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Headerhttps://agentprime.io/advisories/CVE-2026-45055/https://agentprime.io/advisories/CVE-2026-45055/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 20:44:54 GMTCVECVE-2026-45714: CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCEhttps://agentprime.io/advisories/CVE-2026-45714/https://agentprime.io/advisories/CVE-2026-45714/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 20:43:33 GMTCVEcriticalCVE-2026-45054: CubeCart: Authenticated SQL Injection via `sort[]` Parameter in Admin Orders Transactions Listinghttps://agentprime.io/advisories/CVE-2026-45054/https://agentprime.io/advisories/CVE-2026-45054/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 20:42:56 GMTCVECVE-2026-45053: CubeCart: Authenticated Arbitrary File Upload to RCE in REST Files APIhttps://agentprime.io/advisories/CVE-2026-45053/https://agentprime.io/advisories/CVE-2026-45053/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 20:42:08 GMTCVEcriticalCVE-2026-44376: CubeCart: Reflected XSS in Store Search Barhttps://agentprime.io/advisories/CVE-2026-44376/https://agentprime.io/advisories/CVE-2026-44376/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 20:40:44 GMTCVECVE-2026-39428: CubeCart: Stored Cross-Site Scripting (XSS)https://agentprime.io/advisories/CVE-2026-39428/https://agentprime.io/advisories/CVE-2026-39428/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 20:39:54 GMTCVECVE-2026-39358: CubeCart: Time-based Blind SQL Injectionhttps://agentprime.io/advisories/CVE-2026-39358/https://agentprime.io/advisories/CVE-2026-39358/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 20:38:37 GMTCVECVE-2026-44377: CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCEhttps://agentprime.io/advisories/CVE-2026-44377/https://agentprime.io/advisories/CVE-2026-44377/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 20:36:22 GMTCVEcriticalCVE-2025-59413: CubeCart Unauthorized Newsletter Unsubscription via force_unsubscribe Parameterhttps://agentprime.io/advisories/CVE-2025-59413/https://agentprime.io/advisories/CVE-2025-59413/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Sep 2025 16:15:00 GMTCVECVE-2025-59412: CubeCart Vulnerable to HTML Injection in Product Reviews Allows Malicious Links and Defacementhttps://agentprime.io/advisories/CVE-2025-59412/https://agentprime.io/advisories/CVE-2025-59412/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Sep 2025 16:14:44 GMTCVECVE-2025-59411: CubeCart Stored/Reflected HTML Injection Vulnerability in Contact Enquiryhttps://agentprime.io/advisories/CVE-2025-59411/https://agentprime.io/advisories/CVE-2025-59411/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Sep 2025 16:14:23 GMTCVECVE-2025-59335: CubeCart Session Not Invalidated After Password Changehttps://agentprime.io/advisories/CVE-2025-59335/https://agentprime.io/advisories/CVE-2025-59335/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Sep 2025 16:13:23 GMTCVE