2026 matches found
CVE-2024-8949-POC
Vulnerabilidad de Control de Acceso Roto descubierta en el sitio web de compras de gafas en línea de Sourcecodester: la manipulación de ID/Cart ID permite la adición y eliminación no deseadas de artículos en el carrito del usuario CVE-2024-8949 Vendedor: Sourcecodester...
CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS
CVE-2021-27190 - PEEL Shopping，电子商务购物车 - '地址'中的存储型跨站脚本漏洞 日期 2021-02-11 漏洞利用作者 Anmol K Sachan 厂商主页 https://www.peel.fr/ 软件链接 https://www.peel.fr/nos-offres-1/peel-shopping-31.html https://sourceforge.net/projects/peel-shopping/ 易受攻击的软件链接...
CVE-2026-104119
The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...
CVE-2026-104119
The Simple Shopping Cart WordPress plugin, in versions before 5.2.6 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to escape certain settings field values before they are rendered on an admin settings page . This flaw allows high-privilege users, such as admi...
CVE-2026-104119 Simple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API Credentials
The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...
EUVD-2026-92073
The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...
WordPress Simple Shopping Cart plugin < 5.2.6 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Simple Shopping Cart versions 5.2.6...
PT-2026-104606
The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...
CVE-2026-83135
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...
CVE-2026-83134
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. While the vulnerabilit...
CVE-2026-83132
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...
CVE-2026-83133
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...
EUVD-2026-79462
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. While the vulnerabilit...
CVE-2026-83134
CVE-2026-83134 affects the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to...
EUVD-2026-79463
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...
CVE-2026-83135
A vulnerability in the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with required user interaction, resulting in high impact to confidentiality...
EUVD-2026-79460
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...
CVE-2026-83133
Oracle iStore (Shopping Cart component) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated network vulnerability exploitable via HTTP. An attacker with network access can gain unauthorized access to critical data or complete access to all Oracle iStore ac...
EUVD-2026-79461
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...
CVE-2026-83132
CVE-2026-83132 affects the Oracle iStore component (Shopping Cart) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve high confidentiality and integrity impact , enabling unauthorized ...