Ce Phoenix Cart vulnerabilities

2 known vulnerabilities in Ce Phoenix Cart from PhoenixCart. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  PhoenixCart: Improper Neutralization of Input During Web Page Generation

  CVE-2025-47289Jun 2, 2025CE-PhoenixCart

  CE Phoenix is a free, open-source eCommerce platform. A stored cross-site scripting (XSS) vulnerability was discovered in CE Phoenix versions 1.0.9.9 through 1.1.0.2 where an attacker can inject malicious JavaScript into the testimonial description field. Once

• 7.2 High severity

  ce_phoenix: Improper Control of Generation of Code

  CVE-2024-25415Feb 16, 2024osCommerceEPSS 27.2%

  A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php.