Spa-Cart

7 CVEs across 5 Spa-Cart products. Browse Spa-Cart vulnerabilities, severities, and proof-of-concept exploits.

Spa-Cart products with known CVEs

ProductCVEs
Ecommerce Cms2
Ecommerce Cms2
Spa-Cart2
Spa-Cartcms2
Spa-Cart Cms1
Spa-Cart CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-58304Medium6.12025-12-11SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the product description parameter that allows authenticated administrators to…
CVE-2024-6129Low3.72024-06-18A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Affected is an unknown function of the file /login of the component Use…
CVE-2024-6128Medium5.32024-06-18A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6. This issue affects some unknown processing of the file /checkout o…
CVE-2023-43148High8.12023-10-12SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts.
CVE-2023-43149High8.82023-10-12SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status.
CVE-2023-4548Medium6.32023-08-26A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the component GET Paramete…
CVE-2023-4547Low3.52023-08-26A flaw has been found in SPA-Cart eCommerce CMS 1.9.0.3. The affected element is an unknown function of the file /search. This manipulation of the argument fil…