Cs-cart vulnerabilities
We track 5 vulnerabilities in Cs-cart products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2025.
Latest Cs-cart vulnerabilities
- 8.6 High severity
Cs-cart: Improper Access Control
An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting. This allows an attacker to systematically attempt various combinations of usernames and passwords
- 7.2 High severity
cs-cart_multivendor: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on.
- 8.8 High severity
cs-cart_multivendor: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via File Manager/Editor component in the vendor or admin menu.
- 8.8 High severity
cs-cart_multivendor: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information via the product_data parameter in the PDF Add-on.
- 9.8 Critical severity
cs-cart_multivendor: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image upload feature when customizing a shop.