VIR Vulnerability Intelligence Relay

CVE-2024-21517

medium
Published 2024-06-22 · Modified 2024-06-25
CVSS v3
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v2
—
VIR risk
6.1

Description

Cross site scripting in opencart

Predictions

Exploit likelihood
71%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: report@snyk.io — https://security.snyk.io/vuln/SNYK-PHP-OPENCARTOPENCART-7266577

vendor Authored 2026-05-27

Vendor advisory: report@snyk.io — https://github.com/opencart/opencart/commit/0fd1ee4b6c94366bf3e5d3831a8336f3275d1860

Package impact
EcosystemPackageVulnerableFixed
php Packagistopencart/opencart>=4.0.0.0

Application impact
VendorProductVersionsFixed
opencartopencart{"startIncluding":"4.0.0.0"}

References

CWEs

CWE-79

Verify integrity in audit chain (admin only). AS-IS.