Medium severity4.8NVD Advisory· Published Aug 15, 2019· Updated Jun 17, 2026

CVE-2019-15081

Description

OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing feature of the Categories, Product, and Information pages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Opencart/Opencart2 versions
cpe:2.3:a:opencart:opencart:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:opencart:opencart:*:*:*:*:*:*:*:*range: >=3.0.0.0,<=3.0.3.2
- (no CPE)range: 3.x
OpenCart/OpenCartdescription

Patches

Vulnerability mechanics

References

github.com/nipunsomani/Opencart-3.x.x-Authenticated-Stored-XSS/blob/master/README.mdnvdExploitThird Party Advisory
packetstormsecurity.com/files/154286/Opencart-3.x-Cross-Site-Scripting.htmlnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000