Info@Welcart vulnerabilities

6 vulnerabilities

Known vulnerabilities in Info@Welcart products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
5.9CVE-2025-54013info@welcartwelcart e-commerce+1
EPSS score
0.21%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16.
7.2CVE-2025-54012info@welcartwelcart e-commerce+1
EPSS score
0.48%
Deserialization of Untrusted Data vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Object Injection.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16.
4.3CVE-2025-62953info@welcartwelcart e-commerce+1
EPSS score
0.24%
Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through <= 2.11.24.
6.8CVE-2025-47511info@welcartwelcart e-commerce+2
EPSS score
0.54%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Path Traversal.This issue affects Welcart e-Commerce: from n/a through <= 2.11.13.
5.9CVE-2025-58984info@welcartwelcart e-commerce+1
EPSS score
0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.20.
6.5CVE-2026-49775info@welcartwelcart e-commerce+1
EPSS score
0.33%
Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions.