Skip to content
OpenAdvisories

Product · e-commerce

Cradle

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-3320

    Multiple vulnerabilities in Cradle e-commerce

    Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /product/. Exploitation of this vulnerability would allow an attacker to execute…

    e-commerce Cradle
  • Medium 5.1
    CVE-2026-3319

    Multiple vulnerabilities in Cradle e-commerce

    Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /collection/. Exploitation of this vulnerability would allow an attacker to exec…

    e-commerce Cradle