E-Commerce

2 CVEs in 1 E-Commerce product, including Cradle. Newest: CVE-2026-3320 (2026-05-11). Severity, EPSS and public exploits for each.

E-Commerce products with known CVEs

ProductCVEs
Cradle2
E-Commerce CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-33202026-05-11Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML out…
CVE-2026-33192026-05-11Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML out…