7.5
High
CVE-2026-48868 Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions
Description
Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Simple Shopping Cart 5.2 | earliest → 5.2.9 | No fix stated |