PT-2026-6547 · Unknown · Quick.Cart

Beniamin Jabłoński · Published 2026-02-05 · Updated 2026-02-19 · CVE-2026-23797

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Quick.Cart version 6.7 Quick.Cart (affected versions not specified)

Description User passwords are stored in plaintext. An attacker with high privileges can view user passwords on the user editing page. The vendor was notified of this issue but did not provide details regarding vulnerable versions.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

LPE

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2026-23797

Affected Products

Quick.Cart

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-23797 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23797 · Vendor Advisory
• https://cert.pl/posts/2026/02/CVE-2026-23796 · Note
• https://t.me/cveNotify/152492 · Telegram Post
• https://t.me/CVEtracker/43817 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2019387973544890396 · Twitter Post
• https://twitter.com/CVEnew/status/2019378345100652911 · Twitter Post
• https://opensolution.org/sklep-internetowy-quick-cart.html · Note
• https://t.me/cveNotify/150973 · Telegram Post