Vulnerabilities in CE-PhoenixCart

2 results
CVE-2025-47289MEDIUMStored XSS in CE Phoenix Cart Testimonials Allows Account Takeover if Missing HttpOnly FlagEPSS 0.2%CVE-2025-47272MEDIUMPhoenixCart Vulnerable to Account Deletion Without Password ConfirmationEPSS 0.1%