Litecart — known CVE vulnerabilities

Every CVE whose affected-product data names Litecart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2018-12256 — CVSS 8.8 (high): admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file (resulting in…
• CVE-2020-9017 — CVSS 8.0 (high): LiteCart through 2.2.1 allows CSV injection via a customer's profile.
• CVE-2018-10827 — CVSS 7.5 (high): LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because…
• CVE-2022-27168 — CVSS 6.1 (medium): Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via…
• CVE-2020-9018 — CVSS 5.3 (medium): LiteCart through 2.2.1 allows admin/?app=users&doc=edit_user CSRF to add a user.
• CVE-2014-7183 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in the search.php in LiteCart 1.1.2.1 and earlier allow remote attackers to inject…