VYPR
High severity7.5NVD Advisory· Published Sep 16, 2024· Updated Apr 15, 2026

CVE-2023-45854

CVE-2023-45854

Description

A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd parameter in the add-to-cart function.

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.