Vulnerabilities in OpenCart
10 resultsVexday analysis
OpenCart apresenta 4 vulnerabilidades catalogadas, todas de baixa a média severidade, com nenhuma sob exploração ativa conhecida (KEV). A fraqueza dominante é Cross-Site Scripting (CWE-79), indicando risco moderado de comprometimento de sessões de usuários e dados. O panorama de risco é estável, sem atividade maliciosa recente e nenhuma divulgação nos últimos 90 dias.
CVE-2023-2315HIGHPath Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2EPSS 0.8%CVE-2021-47923CRITICALOpenCart 3.0.3.8 Session Fixation via OCSESSID CookieEPSS 0.4%CVE-2024-58341HIGHOpenCart Core 4.0.2.3 SQL Injection via search ParameterEPSS 0.3%CVE-2025-1749MEDIUMHTML injection vulnerability in OpenCartEPSS 0.2%CVE-2025-1748MEDIUMHTML injection vulnerability in OpenCartEPSS 0.2%CVE-2025-1747MEDIUMHTML injection vulnerability in OpenCartEPSS 0.2%CVE-2025-1746MEDIUMCross-Site Scripting vulnerability in OpenCartEPSS 0.2%CVE-2021-47946MEDIUMOpenCart 3.0.3.6 Account Takeover via Cross Site Request ForgeryEPSS 0.2%CVE-2021-47953MEDIUMOpenCart 3.0.3.7 Cross-Site Request Forgery via account/passwordEPSS 0.1%CVE-2026-18412—The OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerabilityEPSS —