CVE-2023-45854

A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd parameter in the add-to-cart function...

CVE-2023-45854: Integer Overflow or Wraparound

A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd parameter in the add-to-cart function...

CVE-2023-45854

The Shopkit 1.0 commerce solution, an open-source Kirby CMS integration, contains a Business Logic vulnerability. An attacker can exploit the add-to-cart function by manipulating the qtd parameter to add products with negative quantities to the shopping cart. This issue is associated with CWE-190...