CVE-2012-2731: Richardo Ante Ubercart AJAX Cart

Low severity, CVSS 2.6. EPSS: 2.2% chance of exploitation in the next 30 days.

The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.

Affected products

• Richardo Ante Ubercart AJAX Cart: version 6.x-2.0 only

Published 2012-06-27. Last modified 2026-06-16.