CVE-2023-39642: Carts.guru Cartsguru

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::display().

Affected products

• Carts.guru Cartsguru: before 2.4.3 (fixed in 2.4.3)

Published 2023-09-15. Last modified 2026-06-17.