PhoenixCart vulnerabilities
We track 2 vulnerabilities in PhoenixCart products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2025.
2vulnerabilities
1critical
1high
0exploited
8.1average CVSS score
Latest PhoenixCart vulnerabilities
- 9.0 Critical severity
PhoenixCart: Improper Neutralization of Input During Web Page Generation
CE Phoenix is a free, open-source eCommerce platform. A stored cross-site scripting (XSS) vulnerability was discovered in CE Phoenix versions 1.0.9.9 through 1.1.0.2 where an attacker can inject malicious JavaScript into the testimonial description field. Once
- 7.2 High severity
ce_phoenix: Improper Control of Generation of Code
A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php.