Advisories · Technology
MarcosCamara01 Ecommerce Template.
Every CVE that names MarcosCamara01 Ecommerce Template among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Cross user deletion and modification of cart and wishlist rows in Ecommerce Template through unscoped primary key queries
- MarcosCamara01 Ecommerce Template
- Broken access control
- CVSS 7.1 High
Price manipulation in the Ecommerce Template checkout flow through a client supplied Stripe price identifier
- MarcosCamara01 Ecommerce Template
- CWE-472
- CVSS 6.9 Medium
Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service
- MarcosCamara01 Ecommerce Template
- Authentication bypass
- CVSS 8.2 High
Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII
- MarcosCamara01 Ecommerce Template
- Authentication bypass