← Database

CVE-2026-24580

MEDIUM CVSS: 4.3 Published: 2026-01-23 Modified: 2026-06-17

Description

Missing Authorization vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ecwid Shopping Cart: from n/a through <= 7.0.5.

Affected Platforms

Unknown

Weakness Type

CWE-862

References