Vulnerabilities in OpenCart
11 resultsCVE-2023-2315HIGHPath Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2EPSS 1.0%CVE-2026-18412CRITICALThe OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerabilityEPSS 0.5%CVE-2021-47923CRITICALOpenCart 3.0.3.8 Session Fixation via OCSESSID CookieEPSS 0.4%CVE-2024-58341HIGHOpenCart Core 4.0.2.3 SQL Injection via search ParameterEPSS 0.4%CVE-2025-1748MEDIUMHTML injection vulnerability in OpenCartEPSS 0.3%CVE-2025-1749MEDIUMHTML injection vulnerability in OpenCartEPSS 0.3%CVE-2025-1747MEDIUMHTML injection vulnerability in OpenCartEPSS 0.3%CVE-2025-1746MEDIUMCross-Site Scripting vulnerability in OpenCartEPSS 0.2%CVE-2026-119558LOWOpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward PointsEPSS 0.2%CVE-2021-47946MEDIUMOpenCart 3.0.3.6 Account Takeover via Cross Site Request ForgeryEPSS 0.2%CVE-2021-47953MEDIUMOpenCart 3.0.3.7 Cross-Site Request Forgery via account/passwordEPSS 0.1%