Description
KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands through the 'my_item_search' parameter in edit.php. Attackers can submit POST requests with malicious SQL payloads to extract sensitive database information using boolean-based blind or error-based injection techniques.
Exploits (1)
References (3)
Core 3
Core References
Third Party Advisory third-party-advisory
VulnCheck Advisory: KomSeo Cart 1.3 SQL Injection via edit.php
https://www.vulncheck.com/advisories/komseo-cart-sql-injection-via-edit-php
Scores
CVSS v3
8.2
EPSS
0.0005
EPSS Percentile
14.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-89
Status
published
Products (1)
Sitemakin/KomSeo Cart
1.3
Published
Mar 26, 2026
Tracked Since
Mar 26, 2026