CVE-2019-15081

PoC —

CVSS 3.1

4.8 medium

EPSS

2%p79

Published

Aug 15, 2019 (Aug 15, 2019)

Modified

Jun 17, 2026

Description

OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing feature of the Categories, Product, and Information pages.

Vendors: opencart
Products: opencart
Ecosystems: E-commerce
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.