Login Request a demo
CM
Product
Cs-cart Multivendor
by Cs-cart · last CVE Sep 24, 2024
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 4Medium 2Low 0
Severity
All severities8Critical2High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cs-cart Multivendor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-26689
9.8
1%
Sep 24
An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request
Affected: 4.16.1
CVE-2023-26686
9.8
1%
Sep 24
File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image upload feature when customizing a shop
Affected: 4.16.1
CVE-2023-26687
8.8
1%
Sep 24
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information via the product_data parameter in the PDF Add-on
Affected: 4.16.1
CVE-2023-26690
8.8
1%
Sep 24
File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via File Manager/Editor component in the vendor or admin menu
Affected: 4.16.1
CVE-2017-2138
8.8
1%
Aug 2
Cross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier…
Affected: through 4.3.10
CVE-2023-26691
7.2
1%
Sep 24
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on
Affected: 4.16.1
CVE-2023-26688
5.4
0%
Sep 24
Cross Site Scripting (XSS) vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the product_data parameter of add/edit product in the…
Affected: 4.16.1
CVE-2017-10886
5.4
1%
Nov 17
Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2…
Affected: 4.0.1; 4.0.2; 4.0.3; 4.1.1; 4.1.2; 4.1.3; +15 more
Showing 8