C
Vendor security profile
cubecart
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit6
Patch rate%0
Avg. CVSS6.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
7
0
CVE KEV
CVE severity distribution
7toplam CVE
High2 (29%)
Medium5 (71%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%86
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
4.8
CVE-2026-54645CubeCart: Stored XSS in Product Description Editor via Global Sanitizer Bypass
Patch status unknown Public Exploits:1EPSS %1
5.4
6.1
CVE-2026-54644CubeCart: XSS via Anchor Tag Attribute Injection in gui.class.php Message System
Patch status unknown Public Exploits:1EPSS %1
7.2
CVE-2026-54647CubeCart : SQL Injection via download_expire Parameter in settings.index.inc.php
Patch status unknown Public Exploits:1EPSS %1
7.2
CVE-2026-54646CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.php
Patch status unknown Public Exploits:1EPSS %1