Surecart vulnerabilities

1 known vulnerability in Surecart from Brainstormforce. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Surecart: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-9065May 20, 2026Brainstormforce

  SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameters ('model_name', 'model_id', 'integration_id', 'provider') on the REST API endpoint '/surecart/v1/integrations/{id}'. The root cause is a flawed escaping bypass