Vendor

    Cs-cart

    24 known vulnerabilities in products by Cs-cart, 0 of them actively exploited (CISA KEV).

    Key figures

    24

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cs-cart
    HighCVE-2016-4862

    CS-Cart CS-Cart: security vulnerability

    8.8
    HighCVE-2023-26687

    cs-cart Multivendor: Path Traversal

    8.8
    HighCVE-2017-15673

    CS-Cart CS-Cart: security vulnerability

    7.2
    HighCVE-2023-26691

    cs-cart Multivendor: Path Traversal

    7.2
    CriticalCVE-2023-26686

    cs-cart Multivendor: security vulnerability

    9.8
    HighCVE-2017-2138

    Frogman Office CS-Cart Japanese Edition: Cross-Site Request Forgery (CSRF)

    also in 2 other products

    8.8
    CriticalCVE-2023-26689

    cs-cart Multivendor: security vulnerability

    9.8
    Not ratedCVE-2006-2863

    CS-Cart CS-Cart: File Inclusion

    —
    HighCVE-2023-26690

    cs-cart Multivendor: security vulnerability

    8.8
    Not ratedCVE-2015-2701

    CS-Cart CS-Cart: Cross-Site Request Forgery (CSRF)

    —
    HighCVE-2025-50850

    CS-Cart CS-Cart: security vulnerability

    8.6
    MediumCVE-2021-32202

    CS-Cart CS-Cart: Cross-Site Scripting (XSS)

    6.1
    Not ratedCVE-2013-0118

    CS-Cart CS-Cart: security vulnerability

    —
    MediumCVE-2023-26688

    cs-cart Multivendor: Cross-Site Scripting (XSS)

    5.4
    Not ratedCVE-2008-1458

    CS-Cart CS-Cart: Cross-Site Scripting (XSS)

    —
    MediumCVE-2017-10886

    Frogman Office CS-Cart Japanese Edition: Cross-Site Scripting (XSS)

    also in 2 other products

    5.4
    Not ratedCVE-2007-0230

    CS-Cart CS-Cart: File Inclusion

    —
    MediumCVE-2025-50847

    CS-Cart CS-Cart: Cross-Site Request Forgery (CSRF)

    6.5
    MediumCVE-2025-50848

    CS-Cart CS-Cart: Cross-Site Scripting (XSS)

    6.1
    Not ratedCVE-2008-6394

    CS-Cart CS-Cart: SQL Injection

    —
    Not ratedCVE-2005-4429

    CS-Cart CS-Cart: SQL Injection

    —
    Not ratedCVE-2009-4891

    CS-Cart CS-Cart: SQL Injection

    —
    Not ratedCVE-2013-7317

    CS-Cart CS-Cart: Cross-Site Scripting (XSS)

    —
    Not ratedCVE-2009-2579

    CS-Cart CS-Cart: SQL Injection

    —

    Products

    Products by Cs-cart
    CS-Cart CS-Cart180
    cs-cart Multivendor80