CVE-2020-9017

HIGH

LiteCart <2.2.1 - Code Injection

Title source: llm
STIX 2.1

Description

LiteCart through 2.2.1 allows CSV injection via a customer's profile.

Scores

CVSS v3 8.0
EPSS 0.0041
EPSS Percentile 61.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-1236
Status published
Products (1)
litecart/litecart < 2.2.1
Published Feb 25, 2020
Tracked Since Feb 18, 2026