CVE-2023-43610

2023-09-2608:19:11

jpcert

www.cve.org

sql injection

welcart e-commerce

cve-2023-43610

privilege escalation

database operations

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

25.6%

JSON

SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or higher privilege to perform unintended database operations.

CNA Affected

[
  {
    "vendor": "Collne Inc.",
    "product": "Welcart e-Commerce",
    "versions": [
      {
        "version": "versions 2.7 to 2.8.21",
        "status": "affected"
      }
    ]
  }
]