VYPR

jCart for OpenCart

by Joomla

CVEs (1)

  • CVE-2018-25336MedMay 17, 2026
    risk 0.34cvss 5.3epss 0.00

    Joomla jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft malicious HTML forms targeting endpoints , and to change user credentials, passwords, and affiliate account details when victims visit the attacker-controlled page.