Collne Inc. Welcart E Commerce vulnerabilities

11 vulnerabilities

Known vulnerabilities in Collne Inc. Welcart E Commerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2021-20734collne inc.welcart e-commerce+2
EPSS score
1.04%
Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors.8.8CVE-2023-40219collne inc.welcart e-commerce+2
EPSS score
1.24%
Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory.4.3CVE-2023-40532collne inc.welcart e-commerce+1
EPSS score
0.72%
Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain partial information of the files on the web server.6.1CVE-2023-41233collne inc.welcart e-commerce+1
EPSS score
0.73%
Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.6.1CVE-2023-41962collne inc.welcart e-commerce+1
EPSS score
0.73%
Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page.6.1CVE-2023-43614collne inc.welcart e-commerce+1
EPSS score
0.80%
Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.6.1CVE-2023-43484collne inc.welcart e-commerce+1
EPSS score
0.80%
Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.8.8CVE-2023-43610collne inc.welcart e-commerce+2
EPSS score
1.19%
SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or higher privilege to perform unintended database operations.8.8CVE-2023-43493collne inc.welcart e-commerce+2
EPSS score
0.98%
SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information.7.2CVE-2023-22705collne inc.welcart e-commerce+2
EPSS score
0.43%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Collne Inc. Welcart e-Commerce plugin <= 2.8.10 versions.7.6CVE-2023-50847collne inc.welcart e-commerce+2
EPSS score
0.53%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Collne Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.3.