Advisories · Technology
OpenCart.
Every CVE that names OpenCart among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points
- OpenCart
- CWE-841
- CVSS 5.1 Medium
OpenCart Autocomplete Workflow edit.php cross site scripting
- OpenCart
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
OpenCart Autocomplete Workflow address.php cross site scripting
- OpenCart
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.1 CriticalCritical · CVSS 9+
The OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerability
- OpenCart
- CVSS 5.3 Medium
OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password
- OpenCart
- Cross-site request forgery (CSRF)
- CVSS 6.9 Medium
OpenCart 3.0.3.6 Account Takeover via Cross Site Request Forgery
- OpenCart
- Cross-site request forgery (CSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie
- opencart
- Authentication bypass
- CVSS 5.1 Medium
OpenCart Extension Installer installer.php path traversal
- OpenCart
- Path traversal
- CVSS 5.1 Medium
OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine
- OpenCart
- Code injection
- CWE-791
- CVSS 6.3 Medium
OpenCart Single-Use Coupon race condition
- OpenCart
- Race condition
- CVSS 4.7 Medium
HTML injection vulnerability in OpenCart
- OpenCart
- Cross-site scripting (XSS)
- CVSS 4.7 Medium
HTML injection vulnerability in OpenCart
- OpenCart
- Cross-site scripting (XSS)
- CVSS 4.7 Medium
HTML injection vulnerability in OpenCart
- OpenCart
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cross-Site Scripting vulnerability in OpenCart
- OpenCart
- Cross-site scripting (XSS)
-
Path traversal in opencart
- opencart
- Path traversal