HackerOne / Express-Cart

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2018-16483	A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators.	HIGH	8.8	Feb 1, 2019
CVE-2018-3758	Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine.	HIGH	8.8	Jun 7, 2018

Rows per page

Showing 1 to 2 of 2 CVEs