VIR Vulnerability Intelligence Relay

CVE-2024-21515

medium
Published 2024-06-22 · Modified 2024-06-25
CVSS v3
4.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v2
—
VIR risk
4.7

Description

Cross site scripting in opencart

Predictions

Exploit likelihood
57%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: report@snyk.io — https://security.snyk.io/vuln/SNYK-PHP-OPENCARTOPENCART-7266573

vendor Authored 2026-05-27

Vendor advisory: report@snyk.io — https://github.com/opencart/opencart/commit/c546199e8f100c1f3797a7a9d3cf4db1887399a2

Package impact
EcosystemPackageVulnerableFixed
php Packagistopencart/opencart>=4.0.0.0

Application impact
VendorProductVersionsFixed
opencartopencart{"startIncluding":"4.0.0.0"}

References

CWEs

CWE-79

Verify integrity in audit chain (admin only). AS-IS.