EUVD-2026-108212

External Control of Assumed-Immutable Web Parameter CWE-472 in the cart and checkout flow of MarcosCamara01 Ecommerce Template allows an authenticated user with no special privileges to be charged the price of one product while placing an order for another, because POST /api/user/cart accepts...

CVE-2026-103266

Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subscription to an existing member, modify that member's name, and inject content into newsletters sent to the member. Depending on the...

EUVD-2026-90660

Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subscription to an existing member, modify that member's name, and inject content into newsletters sent to the member. Depending on the...

CVE-2026-101266

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-101266 Checkout validation bypass

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-101266 Checkout validation bypass

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-101266

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in process by skipping entire check-in steps. While the specific software or hardware platform is not named in the provided documents, the vulnerability results in an unauthorized bypass of required pr...

EUVD-2026-88746

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-101266 Checkout validation bypass

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-101266

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

PT-2026-102514

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

Improper Authorization

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Improper Authorization in RouterController.getSubscriptionCheckoutData through the subscription offer redemption flow in core/server/controllers/router.js. An attacker can redeem an archived or otherwise...

CVE-2026-43927

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, a race condition in the cart checkout flow allows an authenticated client to apply a promo code beyond its configured maximum uses. By sending concurrent checkout requests before any single request...

CVE-2026-31052

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Checkout Authentication Flow component...

Inflection: XSS at https://app.goodhire.com/member/GH.aspx

Unescaped input from a URL parameter in the checkout flow was being used as a JavaScript variable for determining what cart contents to render. By manipulating the URL parameter, the researcher was able to execute arbitrary JavaScript on the page...