CVE-2020-9017: Litecart

High severity, CVSS 8.0. EPSS: 1.1% chance of exploitation in the next 30 days.

LiteCart through 2.2.1 allows CSV injection via a customer's profile.

Affected products

• Litecart Litecart: up to and including 2.2.1

Published 2020-02-25. Last modified 2026-06-17.