Spa-Cart
3 CVEs across 5 Spa-Cart products. Browse Spa-Cart vulnerabilities, severities, and proof-of-concept exploits.
Spa-Cart products with known CVEs
Spa-Cart CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-58304 | High | 7.5 | 2025-12-11 | SPA-CART CMS 1.9.0.3 contains a stored cross-site scripting vulnerability in the product description parameter that allows authenticated administrators to inje… |
CVE-2024-6129 | Low | 3.7 | 2024-06-18 | A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Affected is an unknown function of the file /login of the component Use… |
CVE-2024-6128 | Medium | 5.3 | 2024-06-18 | A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6. This issue affects some unknown processing of the file /checkout o… |
CVE-2023-43148 | High | 8.1 | 2023-10-12 | SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts. |
CVE-2023-43149 | High | 8.8 | 2023-10-12 | SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status. |
CVE-2023-4548 | Medium | 6.3 | 2023-08-26 | A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. This affects an unknown part of the file /search of the component GET… |
CVE-2023-4547 | Low | 3.5 | 2023-08-26 | A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file… |