THREATIST.IORead the docs 7 records
SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the product description parameter that allows authenticated administrators to inject malicious scripts.
A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6.
A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6.
SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status.
SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts.
A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3.
A flaw has been found in SPA-Cart eCommerce CMS 1.9.0.3.