PhoenixCart

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

PhoenixCart records in CISA KEV

No PhoenixCart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ce Phoenix Cart 2 records HIGH

Records

2 records in Ce Phoenix Cart · all components

TI-2025-29819 CVE-2025-47289

Stored XSS in CE Phoenix Cart Testimonials Allows Account Takeover if Missing HttpOnly Flag

HIGH 72

CE Phoenix is a free, open-source eCommerce platform.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.0026 Published 2025-06-02 Fixed in 1.1.0.3 CWE-1004

TI-2024-16732 CVE-2024-25415 · GHSA-pq2x-v8q9-52vx

A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix…

HIGH 67

A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.27237 Published 2024-02-16 No fix listed CWE-94

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0