Advisories · Technology

Sunshine Photo Cart.

Every CVE that names Sunshine Photo Cart among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108069 CVE record

CVSS 5.3 Medium

Sunshine Photo Cart < 3.7.4 - Unauthenticated Content Injection via sunshine_modal_add_comment()
- Sunshine Photo Cart
- CWE-345
Not analysed yet 14 Oct 2026
CVE-2026-85037 CVE record

CVSS 5.3 Medium

Sunshine Photo Cart < 3.7 - Unauthenticated Price Manipulation via IDOR
- Sunshine Photo Cart
- Broken access control
Not analysed yet 9 Sept 2026
CVE-2026-16561 CVE record

CVSS 7.5 High

Sunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment Disclosure
- Sunshine Photo Cart
- Broken access control
Not analysed yet 5 Aug 2026
CVE-2022-4301 CVE record

CVSS 6.1 Medium

Sunshine Photo Cart < 2.9.15 - Reflected XSS
- Sunshine Photo Cart
Not analysed yet 9 Jan 2023