CM
Product
Cs-cart Multivendor
by Cs-cart · last CVE Sep 24, 2024
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 2Low 0
Watch

Add Cs-cart Multivendor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-26687
8.8
1%
Sep 24
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information via the product_data parameter in the PDF Add-on
Affected: 4.16.1
CVE-2023-26690
8.8
1%
Sep 24
File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via File Manager/Editor component in the vendor or admin menu
Affected: 4.16.1
CVE-2017-2138
8.8
1%
Aug 2
Cross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier…
Affected: through 4.3.10
CVE-2023-26691
7.2
1%
Sep 24
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on
Affected: 4.16.1
Showing 4