CVE-2018-25206: Sitemakin Komseo Cart

High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.

KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands through the 'my_item_search' parameter in edit.php. Attackers can submit POST requests with malicious SQL payloads to extract sensitive database information using boolean-based blind or error-based injection techniques.

Affected products

• Sitemakin Komseo Cart: version 1.3 only

Published 2026-03-26. Last modified 2026-06-17.