Spa-cart vulnerabilities
We track 1 vulnerability in Spa-cart products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Spa-cart vulnerabilities
- 9.8 Critical severity
eCommerce CMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the component GET Parameter Handler. Such manipulation of the argument filter[brandid] leads to sql injection. The attack may b