PT-2026-6547 · Unknown · Quick.Cart

Beniamin Jabłoński · Publicado 2026-02-05 · Atualizado 2026-02-19 · CVE-2026-23797

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Média

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Quick.Cart version 6.7 Quick.Cart (affected versions not specified)

Description User passwords are stored in plaintext. An attacker with high privileges can view user passwords on the user editing page. The vendor was notified of this issue but did not provide details regarding vulnerable versions.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Correção

LPE

Enumeração de Fraquezas

CWE-256

Identificadores relacionados

CVE-2026-23797

Produtos afetados

Quick.Cart

Referências · 9

• https://cert.pl/posts/2026/02/CVE-2026-23796 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-23797 · Nota de Segurança
• https://t.me/cveNotify/152492 · Publicação no Telegram
• https://t.me/CVEtracker/43817 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2019387973544890396 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2019378345100652911 · Publicação no Twitter
• https://opensolution.org/sklep-internetowy-quick-cart.html · Nota
• https://osv.dev/vulnerability/CVE-2026-23797 · Aviso do Fabricante
• https://t.me/cveNotify/150973 · Publicação no Telegram