Kartatopia CVEs & Vulnerabilities

1 CVEs affecting Kartatopia products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

piluscart 1

CVE-2019-25672HIGH

PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'send' parameter. Attackers can submit POST requests to the comment submission endpoint with RLIKE-based boolean SQL injection payloads to extract sensitive database information.

6 Apr 2026

8.2

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database