Skip to content
OpenAdvisories

Vendor

SPA-Cart

3 known vulnerabilities.

Products

eCommerce CMS 2 SPA-CART CMS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-58304

    SPA-CART CMS < 2.0.0 Stored Cross-Site Scripting

    SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the product description parameter that allows authenticated administrators to inject malicious scripts. Attackers can submit JavaScript payloads through the 'descr' parameter in…

    SPA-Cart SPA-CART CMS
  • Medium 6.3
    CVE-2023-4548 Public exploit EPSS 29%

    SPA-Cart eCommerce CMS GET Parameter search sql injection

    A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the component GET Parameter Handler. Such manipulation of the argument filter[brandid] leads to sql injection. The attack may …

    SPA-Cart eCommerce CMS