Welcart vulnerabilities
We track 4 vulnerabilities in Welcart products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
Latest Welcart vulnerabilities
- 7.1 High severity
Welcart e-Commerce: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.6.
- 7.1 High severity
Welcart e-Commerce: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.3.
- 8.8 High severity
Welcart e-Commerce: Deserialization of Untrusted Data
Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.
- 8.8 High severity
Welcart e-Commerce: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database.