Read the docs

opencartextensions

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

opencartextensions records in CISA KEV

No opencartextensions vulnerabilities are listed in CISA KEV.

Records

1 record

Priority HIGH 77

Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the product_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00276 Published 2026-05-10 No fix listed CWE-89
Open these records in search →