Vendors / SPA-Cart Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now SPA-Cart records in CISA KEV No SPA-Cart vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00682 · Published 2023-10-12 · No fix listed CWE-352
Priority HIGH 70
A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00537 · Published 2024-06-18 · No fix listed CWE-841
Priority HIGH 70
SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts.
CVSS 3.1 HIGH 8.1· Network · No auth · User interaction · EPSS 0.00613 · Published 2023-10-12 · No fix listed CWE-352
Priority MEDIUM 61
A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00605 · Published 2024-06-18 · No fix listed CWE-205
Priority MEDIUM 58
A flaw has been found in SPA-Cart eCommerce CMS 1.9.0.3.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.6034 · Published 2023-08-26 · Fixed in 1.9.1.4 CWE-79
Priority MEDIUM 57
SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the product description parameter that allows authenticated administrators to inject malicious scripts.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0031 · Published 2025-12-11 · Fixed in 2.0.0 CWE-79
Priority MEDIUM 48
A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.30675 · Published 2023-08-26 · Fixed in 1.9.1.4 CWE-74
Open these records in search → All records by CVSS severity
0 2 5 0 0
THREATIST.IORead the docs