← Back

Opencart Overclocked

opencart-overclocked

Vendor: Villagedefrance • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-1000640
1Villagedefrance
1Opencart Overclocked
Nov 21, 2024
Aug 20, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
OpenCart-Overclocked version <=1.11.1 contains a Cross Site Scripting (XSS) vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, s...Show more
OpenCart-Overclocked version <=1.11.1 contains a Cross Site Scripting (XSS) vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be exploitable via Malicious input passed in GET parameter.Show less