Skip to content

Vendor

e-commerce vulnerabilities

2 published CVES affecting e-commerce, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of e-commerce alerts

Products

Latest e-commerce CVEs

Newest publication first

  1. CVE-2026-3320 Multiple vulnerabilities in Cradle e-commerce

    Published
    MediumCVSS 5.1 EPSS 0.32%

    Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /product/. Exploitation of this vulnerability would allow an attacker to execute arbitrary JavaScript...

  2. CVE-2026-3319 Multiple vulnerabilities in Cradle e-commerce

    Published
    MediumCVSS 5.1 EPSS 0.32%

    Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /collection/. Exploitation of this vulnerability would allow an attacker to execute arbitrary JavaScr...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.