6 matches found
CVE-2022-27168
Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...
6.1CVSS6.5AI score0.01057EPSS
SaveExploits0References1
EUVD-2020-29847
Malware in sbrugna...
8CVSS7.8AI score0.01102EPSS
SaveExploits1References3
EUVD-2018-2896
Malware in sbrugna...
7.5CVSS7.6AI score0.01766EPSS
SaveExploits0References2
EUVD-2018-4234
Malware in sbrugna...
8.8CVSS8.7AI score0.02599EPSS
SaveExploits4References4
EUVD-2022-31704
Malicious code in bioql PyPI...
6.1CVSS6.3AI score0.01057EPSS
SaveExploits0References4
Cross site request forgery (csrf)
admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file resulting in remote code execution by using the text/xml or application/xml Content-Type in a publichtml/admin/?app=vqmods&doc=vqmods request...
6.5CVSS8.5AI score0.02599EPSS
SaveExploits4References2Affected Software1
20