CVE-2018-25336: Jcart For Opencart

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft malicious HTML forms targeting endpoints , and to change user credentials, passwords, and affiliate account details when victims visit the attacker-controlled page.

Affected products

• Jcart Jcart For Opencart: version 2.3.0.2 only

Published 2026-05-17. Last modified 2026-06-17.