https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:02:48.641088+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-211658 EUVD-2026-211658 2026-10-02T11:02:48.672909+00:00 EUVD-2026-211658 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36694 fkie_cve-2024-36694 2026-10-02T11:02:48.672946+00:00

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.

 https://cve.radiocsirt.org/vuln/ghsa-xrh7-2gfq-4rcq GHSA-xrh7-2gfq-4rcq — openCart Server-Side Template Injection (SSTI) vulnerability 2026-10-02T11:02:48.672977+00:00

Affected: Packagist: opencart/opencart

A Server-Side Template Injection (SSTI) vulnerability in the Theme Editor Function of openCart project v4.0.2.3 allows attackers to execute arbitrary code via injecting a crafted payload.