Skip to content
OpenAdvisories

Package · Packagist

opencart/opencart

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.4
    CVE-2024-21514 Public exploit EPSS 19%

    SQL injection in opencart

    This affects versions of the package opencart/opencart from 0.0.0. An SQL Injection issue was identified in the Divido payment extension for OpenCart, which is included by default in version 3.0.3.9. As an anonymous unauthenticated user, if the Divido payment…

    opencart/opencart Packagist
  • Medium 4.8
    CVE-2020-29470 Public exploit

    OpenCart Cross-site Scripting (XSS) in the Subject field of mail.

    OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS tri…

    opencart/opencart Packagist
  • Medium 4.8
    CVE-2020-29471 Public exploit

    OpenCart Stored Cross-Site Scripting

    OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger.

    opencart/opencart Packagist
  • Medium 5.4
    CVE-2020-10596 Public exploit

    Cross-site Scripting in OpenCart

    OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.

    opencart/opencart Packagist