Centarro

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Centarro records in CISA KEV

No Centarro vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Commerce Core · all components

TI-2026-09252 CVE-2026-10769 · GHSA-rq79-xhrq-f62x

LOW 24

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Core allows Stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00231 Published 2026-07-10 Fixed in 3.3.6 CWE-79