Quick.Cart vulnerabilities

2 known vulnerabilities in Quick.Cart from OpenSolution. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Quick.Cart: Session Fixation

  CVE-2026-23796Feb 5, 2026OpenSolution

  Quick.Cart allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session. The

• 7.2 High severity

  Quick.Cart: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-67684Jan 22, 2026OpenSolution

  Quick.Cart is vulnerable to Local File Inclusion and Path Traversal issues in the theme selection mechanism. Quick.Cart allows a privileged user to upload arbitrary file contents while only validating the filename extension. This allows an attacker to include