CVE-2021-37823: Opencart

Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days.

OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background.

Affected products

• Opencart Opencart: version 3.0.3.7 only

Published 2022-11-03. Last modified 2026-06-17.