Skip to content
OpenAdvisories

Vendor

e-commerce

2 known vulnerabilities.

Products

Cradle 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-3320

    Multiple vulnerabilities in Cradle e-commerce

    Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /product/. Exploitation of this vulnerability would allow an attacker to execute…

    e-commerce Cradle
  • Medium 5.1
    CVE-2026-3319

    Multiple vulnerabilities in Cradle e-commerce

    Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /collection/. Exploitation of this vulnerability would allow an attacker to exec…

    e-commerce Cradle