Vulnerabilities in uscnanbu
8 resultsCVE-2021-4355HIGHWelcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information DisclosureEPSS 0.8%CVE-2021-4375MEDIUMWelcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information DisclosureEPSS 0.6%CVE-2023-6120MEDIUMWelcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory TraversalEPSS 0.5%CVE-2025-0511HIGHWelcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name ParameterEPSS 0.3%CVE-2025-10649MEDIUMWelcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via CookieEPSS 0.3%CVE-2025-9367MEDIUMWelcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-10651MEDIUMWelcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mailEPSS 0.2%CVE-2025-12979MEDIUMWelcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information ExposureEPSS 0.2%