What is CVE-2026-23797?

CVE-2026-23797 is a medium-severity vulnerability in Opensolution Quick.cart, classified under Plaintext Storage of a Password. CVSS score: 4.9/10. Published 2026-02-05.

How severe is CVE-2026-23797?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Vulnerability in Opensolution Quick.cart

CVE-2026-23797

In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password in user editing page. The vendor was notified early about this vulnerability, but didn't respond with the details of v…

EPSS: 0.002 (15.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Opensolution Quick.cart — versions 6.7

Weakness classification (CWE)

CWE-256 — Plaintext Storage of a Password

References

cvd@cert.pl (Product, product)
cvd@cert.pl (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2026-23797?: CVE-2026-23797 is a medium-severity vulnerability in Opensolution Quick.cart, classified under Plaintext Storage of a Password. CVSS score: 4.9/10. Published 2026-02-05.
How severe is CVE-2026-23797?: Medium severity. CVSS v3 base score is 4.9 out of 10.