5.1
Medium
CVE-2026-3714 A vulnerability has been found in OpenCart 4.0.2.3
Description
A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template.php of the component Incomplete Fix CVE-2024-36694. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenCart | 4.0.2.3 | No fix stated |
Other CVEs of OpenCart
The 6 CVEs of OpenCart →
CVE-2026-84438
A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4
5.1
Medium
CVE-2026-84437
A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4
5.1
Medium
CVE-2026-5331
A vulnerability was determined in OpenCart 4.1.0.3
5.1
Medium
CVE-2025-15116
A security flaw has been discovered in OpenCart up to 4.1.0.3
6.3
Medium