CS
Product
Cs-cart
by Cs-cart · last CVE Jul 31, 2025
18
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch

Add Cs-cart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-2138
8.8
1%
Aug 2
Cross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier…
Affected: through 4.3.10
CVE-2016-4862
8.8
2%
Apr 20
Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated users to execute arbitrary PHP code on the…
Affected: through 4.3.9; through 4.3.9
CVE-2025-50850
8.6
0%
Jul 31
An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting
Affected: 4.18.3
CVE-2017-15673
7.2
2%
Nov 28
The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors involving a custom page
Affected: through 4.6.2
Showing 4