← Database

CVE-2024-42404

HIGH CVSS: 8.8 Published: 2024-09-18 Modified: 2026-06-17

Description

SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database.

Affected Platforms

Welcart Welcart E-Commerce

Weakness Type

CWE-89

References