Spa Cart Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:spa-cart:spa-cart_cms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Spa Cart (5f707982-c5d0-51cc-97b4-ebd9804f4ee4) |
|---|---|
| Product | Spa Cart Cms (94eddcb2-cdfa-580f-94e4-dcb8a226ce9a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-58304 |
vulnerable | 2026-06-08 06:56:14.395879 |
SPA-CART CMS 1.9.0.3 Stored Cross-Site Scripting
HIGH (7.5)
SPA-CART CMS 1.9.0.3 contains a stored cross-site scripting vulnerability in the product description parameter that allows authenticated administrators to inject malicious scripts. Attackers can submit JavaScript payloads through the 'descr' parameter in the product edit form to execute arbitrary code in administrative users' browsers.
Published: 2025-12-11T21:40:42.224Z
Updated: 2026-07-14T22:54:50.782Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.