Skip to content
OpenAdvisories

Product · OpenSolution

Quick.Cart

7 known vulnerabilities.

Quick.Cart at a glance

Last 12 months
6
Critical · all time
1
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 2 vulnerabilities, 1 critical February 2026: 2 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 1 vulnerability August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202610
Aug 202600
Jul 202610
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202620
Jan 202621
Dec 202500
Nov 202500
Oct 202510
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Medium 6.9
    CVE-2026-41875 Public exploit

    Cross-Site Request Forgery in admin panel of Quick.Cart

    Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request that changes admin's login and password. This software does imp…

    OpenSolution Quick.Cart
  • Medium 6.8
    CVE-2026-41874

    Hard-coded admin credentials in Quick.Cart

    Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor assessed the likeli…

    OpenSolution Quick.Cart
  • Medium 4.8
    CVE-2026-23796

    Session Fixation in Quick.Cart

    Quick.Cart allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session. Th…

    OpenSolution Quick.Cart
  • Medium 6.9
    CVE-2026-23797

    Plaintext password display in Quick.Cart

    In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password in user editing page. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulne…

    OpenSolution Quick.Cart
  • Critical 9.4
    CVE-2025-67684

    Remote Code Execution via Local File Inclusion in Quick.Cart

    Quick.Cart is vulnerable to Local File Inclusion and Path Traversal issues in the theme selection mechanism. Quick.Cart allows a privileged user to upload arbitrary file contents while only validating the filename extension. This allows an attacker to include…

    OpenSolution Quick.Cart
  • Medium 5.1
    CVE-2025-67683

    Reflected XSS in Quick.Cart

    Quick.Cart is vulnerable to reflected XSS via the sSort parameter. An attacker can craft a malicious URL which, when opened, results in arbitrary JavaScript execution in the victim’s browser. The vendor was notified early about this vulnerability, but didn't …

    OpenSolution Quick.Cart
  • Medium 5.1
    CVE-2025-10317

    Multiple Cross-Site Request Forgery in Quick.Cart

    Quick.Cart is vulnerable to Cross-Site Request Forgery in product creation functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request creating a malicious product with content defined b…

    OpenSolution Quick.Cart