Known Vulnerabilities for Ez Cart by Scriptsez
Listed below are 1 of the newest known vulnerabilities associated with "Ez Cart" by "Scriptsez".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-76565 json | Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7 | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-76564 json | Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7 | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-75952 json | Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3 - Tokens were missing on many A... | Not Provided | 2026-08-19 | 2026-08-20 |
| CVE-2026-74251 json | Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attrib... | Not Provided | 2026-08-16 | 2026-08-17 |
| CVE-2026-67362 json | Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - Fou... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-67360 json | Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An ... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-66682 json | Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-66466 json | Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Q... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-65557 json | Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-60817 json | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that ar... | Not Provided | 2026-07-21 | 2026-07-24 |