https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T00:46:30.091510+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-182678 EUVD-2026-182678 2026-10-18T00:46:30.185843+00:00 EUVD-2026-182678 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0118 fkie_cve-2013-0118 2026-10-18T00:46:30.185881+00:00

CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self.

 https://cve.radiocsirt.org/vuln/ghsa-vp4c-jhff-mvr9 GHSA-vp4c-jhff-mvr9 2026-10-18T00:46:30.185914+00:00

CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self.

 https://cve.radiocsirt.org/vuln/gsd-2013-0118 gsd-2013-0118 2026-10-18T00:46:30.185932+00:00 gsd-2013-0118