Threats tagged 'ghsa-845x-v9mv-jq7m'

An unauthenticated cross-site scripting (XSS) vulnerability exists in Welcart e-Commerce versions up to and including 2.11.31. This vulnerability allows an attacker to inject malicious scripts without authentication, potentially impacting confidentiality, integrity, and availability. The vulnerability is identified as CVE-2026-27539 and has a high severity rating with a CVSS score of 7.1.