Read the docs

Commerceguys

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Commerceguys records in CISA KEV

No Commerceguys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Commerce 2 records LOW Commerce Reorder 1 record LOW

Records

3 records

TI-2014-07351 CVE-2014-9025 · GHSA-hq3m-73f6-2xp8

The default checkout completion rule in the commerce_order module in the Drupal Commerce…

Priority LOW 25

The default checkout completion rule in the commerce_order module in the Drupal Commerce module 7.x-1.x before 7.x-1.10 for Drupal uses the email address as the username for new accounts created at checkout, which allows…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01173 Published 2014-11-20 No fix listed CWE-200
TI-2012-01428 CVE-2012-1639 · GHSA-85cc-pv92-m56v

Multiple cross-site scripting (XSS) vulnerabilities in product/commerce_product.module in…

Priority LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in product/commerce_product.module in the Drupal Commerce module for Drupal before 7.x-1.2 allow remote authenticated users to inject arbitrary web script or HTML via t…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0107 Published 2012-10-01 No fix listed CWE-79
Open these records in search →