Lucene search
+L

4994 matches found

Cvelist
Cvelist
added 2025/11/21 12:30 p.m.18 views

CVE-2025-66109 WordPress Cart Weight for WooCommerce plugin <= 1.9.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in Octolize Shipping Plugins Cart Weight for WooCommerce woo-cart-weight allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cart Weight for WooCommerce: from n/a through = 1.9.11...

5.3CVSS0.00203EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/21 12:30 p.m.4 views

CVE-2025-66109 WordPress Cart Weight for WooCommerce plugin <= 1.9.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in octolize Cart Weight for WooCommerce woo-cart-weight allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cart Weight for WooCommerce: from n/a through = 1.9.11...

6.5AI score0.00203EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/21 12:30 p.m.20 views

CVE-2025-66109

The supplied connected data confirm a Missing Authorization / Broken Access Control vulnerability in the WordPress Cart Weight for WooCommerce plugin, affecting versions

5.3CVSS5.9AI score0.00203EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/21 12:00 a.m.11 views

PT-2025-47771

Missing Authorization vulnerability in octolize Cart Weight for WooCommerce woo-cart-weight allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cart Weight for WooCommerce: from n/a through = 1.9.11...

7AI score0.00203EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/21 12:00 a.m.12 views

WordPress plugin Cart Weight for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A missing authorization vulnerability exists in the WordPress Cart Weight for WooCommerce plugin, which can be exploited by an attacker to leverage a misconfigured access contro...

5.3CVSS6.7AI score0.00203EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/11/20 12:00 a.m.13 views

Online Shopping Portal my-cart.php file cross-site scripting vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the quantity parameter of my-cart.php, which can be exploited to execute arbitrary Web...

5.4CVSS6.3AI score0.00225EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/11/18 12:00 a.m.9 views

mall-swarm authorization issue vulnerability (CNVD-2026-10881)

mall-swarm is a microservice mall system. There is an authorization issue vulnerability in mall-swarm, which originates from an improper authorization issue in the updateAttr function in the file /cart/update/attr. No detailed vulnerability details are available at this time...

6.5CVSS5.5AI score0.0024EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/11/18 12:00 a.m.8 views

Simple Cafe Ordering System add_to_cart File Cross Site Scripting Vulnerability

Simple Cafe Ordering System is a simple coffee ordering system. The Simple Cafe Ordering System suffers from a cross-site scripting vulnerability that arises from insufficient security filtering of the productname parameter in the /addtocart file. An attacker could use this vulnerability to execu...

5.4CVSS4.5AI score0.00256EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/17 8:15 p.m.7 views

CVE-2024-44661

PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting XSS via the quantity parameter in my-cart.php...

5.4CVSS5.8AI score0.00225EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/17 8:15 p.m.9 views

CVE-2024-44661

PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting XSS via the quantity parameter in my-cart.php...

5.4CVSS0.00225EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/17 7:03 a.m.16 views

CVE-2025-13239

A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown functionality of the file /submitcheckout. Such manipulation of the argument ordertotalamount/carttotalamount leads to enforcement of...

7.5CVSS6.5AI score0.00309EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/11/17 12:00 a.m.24 views

CVE-2024-44661

PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting XSS via the quantity parameter in my-cart.php...

0.00225EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.14 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the quantity parameter of my-cart.php, which can be exploited to execute arbitrary Web...

5.4CVSS6.2AI score0.00225EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.15 views

PT-2025-47199

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal is susceptible to a Cross Site Scripting XSS issue. This flaw is located in the my-cart.php file and specifically affects the quantity parameter...

5.4CVSS6.3AI score0.00225EPSS
SaveExploits1References6
CVE
CVE
added 2025/11/17 12:00 a.m.22 views

CVE-2024-44661

The CVE-2024-44661 entry concerns the PHPGurukul Online Shopping Portal 2.0. Affected component: the my-cart.php file, specifically the quantity parameter. Root cause: lack of proper input filtering/escaping in the quantity parameter, enabling Cross Site Scripting (XSS). Impact: attackers can inj...

5.4CVSS5.8AI score0.00225EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/16 5:47 p.m.19 views

CVE-2025-13202

A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /addtocart. Performing manipulation of the argument productname results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.4CVSS5.7AI score0.00256EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/16 6:15 a.m.12 views

CVE-2025-13239

A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown functionality of the file /submitcheckout. Such manipulation of the argument ordertotalamount/carttotalamount leads to enforcement of...

7.5CVSS5.5AI score0.00309EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/11/16 12:00 a.m.16 views

Bdtask Isshue - Multi Store eCommerce Shopping Cart Solution 安全漏洞

Bdtask Isshue – Multi Store eCommerce Shopping Cart Solution is an e-commerce shopping cart system developed by the Bangladeshi company Bdtask. Version 5 of Bdtask Isshue – Multi Store eCommerce Shopping Cart Solution contains a security vulnerability. This vulnerability arises from incorrect...

7.5CVSS5.9AI score0.00309EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/11/16 12:00 a.m.14 views

PT-2025-47074

Name of the Vulnerable Software and Affected Versions Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution version 5 Description A security issue exists in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution version 5. The issue involves manipulation of the...

5.3CVSS6.1AI score0.00309EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/11/15 6:30 p.m.8 views

EUVD-2025-197703

A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /addtocart. Performing manipulation of the argument productname results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.1CVSS5.3AI score0.00256EPSS
SaveExploits1References6
Rows per page
Query Builder