Xt Commerce
1 CVEs
product
Monthly
The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id field in the POST request for altering an. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Privilege Escalation
Xt Commerce
NVD
CVSS 3.1
4.3
EPSS
2.0%
EPSS 2%
CVSS 4.3
MEDIUM
POC
PATCH
This Month
The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id field in the POST request for altering an. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Privilege Escalation
Xt Commerce
NVD