CVE-2023-43614: Welcart E-Commerce

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.

Affected products

• Welcart Welcart E-Commerce: from 2.7, up to and including 2.8.21

Published 2023-09-27. Last modified 2026-06-17.