Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

opencart — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in opencart, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for OpenCart, an open-source e-commerce platform, focusing on specific weakness classes. It collects recorded security flaws reported across the product, covering advisories published from 2005 through the present. Here you can track the vendor’s security notices, examine the distribution of weakness types, and review the complete vulnerability history for this product. The collection highlights common issues such as cross-site scripting and SQL injection, reflecting the typical risks associated with web applications of this era. Users can filter by severity or date to analyze trends over time, helping teams assess residual risk and verify remediation status for known exposures in their deployment environments.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-84438 OpenCart Autocomplete Workflow edit.php cross site scripting CWE-79 3.5 Low 2026-09-02
CVE-2026-84437 OpenCart Autocomplete Workflow address.php cross site scripting CWE-79 3.5 Low 2026-09-02
CVE-2026-18412 The OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerability - - 2026-08-10
CVE-2021-47953 OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password CWE-352 4.3 Medium 2026-05-10
CVE-2021-47946 OpenCart 3.0.3.6 Account Takeover via Cross Site Request Forgery CWE-352 5.3 Medium 2026-05-10
CVE-2021-47923 OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie CWE-290 9.8 Critical 2026-05-10
CVE-2026-5331 OpenCart Extension Installer installer.php path traversal CWE-22 4.7 Medium 2026-04-02
CVE-2026-3714 OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine CWE-1336 4.7 Medium 2026-03-08
CVE-2025-15116 OpenCart Single-Use Coupon race condition CWE-362 3.7 Low 2025-12-28
CVE-2025-1749 HTML injection vulnerability in OpenCart CWE-79 4.7 Medium 2025-02-28
CVE-2025-1748 HTML injection vulnerability in OpenCart CWE-79 4.7 Medium 2025-02-28
CVE-2025-1747 HTML injection vulnerability in OpenCart CWE-79 4.7 Medium 2025-02-28
CVE-2025-1746 Cross-Site Scripting vulnerability in OpenCart CWE-79 6.1 Medium 2025-02-28
CVE-2023-2315 Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 CWE-22 8.1 High 2023-09-26
CVE-2013-1891 OpenCart 路径遍历漏洞 CWE-22 9.1 - 2022-06-24

All 15 known CVE vulnerabilities affecting opencart with full Chinese analysis, references, and POCs where available.