Skip to main content
ExploitPublished

https://www.cubecart.com/download · CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)

Affects https://www.cubecart.com/downloadSource Exploit-DB RSS Feed

0
Severity
Medium

Rated by Threat Radar

Patch
Available – fixed in 7.0.0, 6.7.0

Data as of 10 Aug 2026, 21:19 UTC

What to do

Upgrade https://www.cubecart.com/download to 7.0.0 or 6.7.0.

Affected software

ProductAffectedFixed in
https://www.cubecart.com https://www.cubecart.com/downloadAffected
  • >=6.0.0 <7.0.0
  • >=6.0.0 <6.7.0
  • 6.x.x
Fixed in
  • 7.0.0
  • 6.7.0

AI-suggested

If you cannot patch yet, consider implementing web application firewall (WAF) rules to detect and block reflected XSS attempts and review input validation and output encoding practices in the application.

Description

CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)

References

Community reviews

Loading reviews…