CS
Product
Cs-cart
18
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Cs-cart to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-50847 | 6.5 | Jul 31 | Cross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's comparison list via a crafted HTTP request Affected: 4.18.3 |
| CVE-2025-50848 | 6.1 | Jul 31 | A file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute arbitrary code Affected: 4.18.3 |
| CVE-2021-32202 | 6.1 | Sep 14 | In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page Affected: 4.11.1 |
| CVE-2017-10886 | 5.4 | Nov 17 | Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2… Affected: 4.0.1; 4.0.2; 4.0.3; 4.1.1; 4.1.2; 4.1.3; +15 more |
Showing 4
