Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-27130 EUVD-2025-9138GHSA-9jfw-fmcq-hgjp

Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited…

Published Apr 1, 2025 · Updated Apr 1, 2025 · Assigned by jpcert

Description

Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.

Affected products

VendorProductAffectedFixed
Welcart Welcart e-Commerce 2.11.6 and earlier versions —

References