Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication.Check if you run itEPSS 0.19%May 17, 2026
- Medium5.3OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint.Check if you run itEPSS 0.13%May 10, 2026
- Medium6.9OpenCart 3.0.3.6 contains a cross-site request forgery vulnerability in the /account/edit endpoint that allows unauthenticated attackers to modify victim account detai…Check if you run itEPSS 0.15%May 10, 2026
- High8.8Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code…Check if you run itEPSS 0.28%May 10, 2026
- Critical9.3OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting arbitrary values into the OCSESSID cookie.Check if you run itEPSS 0.42%May 10, 2026
- Low2.0A vulnerability was determined in OpenCart 4.1.0.3.Check if you run itEPSS 0.40%Apr 2, 2026
- High8.8OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'se…Check if you run itEPSS 0.34%Mar 25, 2026
- Medium5.1A vulnerability has been found in OpenCart 4.0.2.3.Check if you run itEPSS 0.30%Mar 8, 2026
- Medium6.3A security flaw has been discovered in OpenCart up to 4.1.0.3.Check if you run itEPSS 0.41%Dec 28, 2025
- Medium6.1OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via SVG file uploads used in blog posts.Check if you run itEPSS 0.28%Jul 25, 2025
- Medium6.1OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor.Check if you run itEPSS 0.28%Jul 25, 2025
- Medium4.7CVE-2025-1749 is listed by HTML injection vulnerabilities in OpenCart versions prior to 4.1.0..Check if you run itEPSS 0.26%Feb 28, 2025
- Medium4.7CVE-2025-1748 is listed by HTML injection vulnerabilities in OpenCart versions prior to 4.1.0..Check if you run itEPSS 0.26%Feb 28, 2025
- Medium4.7CVE-2025-1747 is listed by HTML injection vulnerabilities in OpenCart versions prior to 4.1.0..Check if you run itEPSS 0.26%Feb 28, 2025
- Medium6.1Cross-Site Scripting vulnerability in OpenCart versions prior to 4.1.0.Check if you run itEPSS 0.23%Feb 28, 2025
- High7.2OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.Check if you run itEPSS 0.92%Dec 18, 2024
- High7.2CVE-2024-21519 is listed by This affects versions of the package opencart/opencart from 4.0.0.0..Check if you run itEPSS 0.72%Jun 22, 2024
- High7.2CVE-2024-21518 is listed by This affects versions of the package opencart/opencart from 4.0.0.0..Check this weekEPSS 14.13%Jun 22, 2024
- Low1.2CVE-2024-21517 is listed by This affects versions of the package opencart/opencart from 4.0.0.0..Check if you run itEPSS 0.39%Jun 22, 2024
- Low1.2This affects versions of the package opencart/opencart from 4.0.0.0 and before 4.1.0.0.Check if you run itEPSS 0.37%Jun 22, 2024
- Low1.2CVE-2024-21515 is listed by This affects versions of the package opencart/opencart from 4.0.0.0..Check if you run itEPSS 0.37%Jun 22, 2024
- High8.1This affects versions of the package opencart/opencart from 0.0.0.Check this weekEPSS 19.08%Jun 22, 2024
- High8.8An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside…Check if you run itEPSS 1.78%Nov 15, 2023
- High8.8Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the serverCheck if you run itEPSS 1.04%Sep 27, 2023
- Critical9.8OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain acce…Check if you run itEPSS 1.29%Sep 12, 2023
Sort