Collne Inc.

12 CVEs across 2 Collne Inc. products. Browse Collne Inc. vulnerabilities, severities, and proof-of-concept exploits.

Collne Inc. products with known CVEs

ProductCVEs
Welcart E-Commerce11
Welcart E-Commerce (WordPress Plugin)1
Collne Inc. CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-50847High7.62023-12-28Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Collne Inc. Welcart e-Commerce.This issue affects Welcart…
CVE-2023-43614Medium6.12023-09-27Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an a…
CVE-2023-43610High8.82023-09-27SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or highe…
CVE-2023-43493Medium4.92023-09-27SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive in…
CVE-2023-43484Medium6.12023-09-27Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitra…
CVE-2023-41962Medium6.12023-09-27Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to i…
CVE-2023-41233Medium6.12023-09-27Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker…
CVE-2023-40532Medium4.32023-09-27Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain partial information of the fi…
CVE-2023-40219High7.22023-09-27Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory.
CVE-2023-22705High7.12023-03-29Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Collne Inc. Welcart e-Commerce plugin <= 2.8.10 versions.
CVE-2022-41840High7.52022-11-18Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.
CVE-2021-20734Medium6.12021-06-22Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vec…