Threat database

9 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.1%	CVE-2026-96761Welcart e-Commerce · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Welcart… High7.1EPSS 0.1%2026-10-09CVE Database V5CVE-2026-96761 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.3. EPSS 0.1%Vulnerability Welcart	CVE Database V5	2026-10-09
High	7.1	EPSS 0.3%	CVE-2026-27539Welcart e-Commerce · Cross-site Scripting High7.1EPSS 0.3%2026-08-13CVE Database V5CVE-2026-27539 Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions. EPSS 0.3%Vulnerability Welcart #cwe-79	CVE Database V5	2026-08-13
Medium	6.5	EPSS 0.3%	CVE-2026-49775Welcart e-Commerce · Missing Authorization Medium6.5EPSS 0.3%2026-06-15CVE Database V5CVE-2026-49775 Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions. EPSS 0.3%Vulnerability info@welcart #cwe-862	CVE Database V5	2026-06-15
Medium	4.3	EPSS 0.2%	CVE-2025-62953Welcart e-Commerce · Missing Authorization Medium4.3EPSS 0.2%2025-10-27CVE Database V5CVE-2025-62953 Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through <= 2.11.24. EPSS 0.2%Vulnerability info@welcart	CVE Database V5	2025-10-27
Medium	5.9	EPSS 0.2%	CVE-2025-58984Welcart e-Commerce · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in info@welcart… Medium5.9EPSS 0.2%2025-09-09CVE Database V5CVE-2025-58984 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.20. EPSS 0.2%Vulnerability info@welcart	CVE Database V5	2025-09-09
High	7.2	EPSS 0.5%	CVE-2025-54012Welcart e-Commerce · Deserialization of Untrusted Data High7.2EPSS 0.5%2025-08-20CVE Database V5CVE-2025-54012 Deserialization of Untrusted Data vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Object Injection.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16. EPSS 0.5%Vulnerability info@welcart	CVE Database V5	2025-08-20
Medium	5.9	EPSS 0.2%	CVE-2025-54013Welcart e-Commerce · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in info@welcart… Medium5.9EPSS 0.2%2025-07-16CVE Database V5CVE-2025-54013 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16. EPSS 0.2%Vulnerability info@welcart	CVE Database V5	2025-07-16
Medium	6.8	EPSS 0.5%	CVE-2025-47511Welcart e-Commerce · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in info@welcart Welcart… Medium6.8EPSS 0.5%2025-06-09CVE Database V5CVE-2025-47511 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Path Traversal.This issue affects Welcart e-Commerce: from n/a through <= 2.11.13. EPSS 0.5%Vulnerability info@welcart	CVE Database V5	2025-06-09
Medium	5.4	EPSS 0.3%	CVE-2024-32144Welcart e-Commerce · Missing Authorization Medium5.4EPSS 0.3%2024-06-11CVE Database V5CVE-2024-32144 Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14. EPSS 0.3%Vulnerability Welcart Inc.#cwe-862	CVE Database V5	2024-06-11

Showing 1–9 of 9 results