CVE-2018-10827: Litecart

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because public_html/logs/not_found.log grows without bound, and is loaded into memory for each request.

Affected products

• Litecart Litecart: before 2.1.2 (fixed in 2.1.2)

Published 2018-05-09. Last modified 2026-06-17.