Vulnerabilities (CVE)

Filtered by vendor Cubecart Subscribe
Filtered by product Cubecart
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-20716 1 Cubecart 1 Cubecart 2024-11-21 7.5 HIGH 9.8 CRITICAL
CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.
CVE-2018-20703 1 Cubecart 1 Cubecart 2024-11-21 3.5 LOW 5.4 MEDIUM
CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.