CVE-2024-45366: Welcart E-Commerce

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.

Affected products

• Welcart Welcart E-Commerce: before 2.11.2 (fixed in 2.11.2)

Published 2024-09-18. Last modified 2026-06-17.