CVE-2026-3714
Medium · 4.7CVSS
4.7
EPSS
0.5%
Published
Mar 8, 2026
CISA due date
—
The record
A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template.php of the component Incomplete Fix CVE-2024-36694. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-86206 A vulnerability in the N-central internal API access control filter allows unauthorised… CWE-791
- CVE-2026-75979 A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. CWE-791
- CVE-2026-19929 A vulnerability was identified in OpenBoxes up to 0.9.6. CWE-791
- CVE-2026-11998 A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE… CWE-791
- CVE-2026-48208 An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition… CWE-791
- CVE-2026-9498 A vulnerability has been found in Dromara lamp-cloud up to 5.6.2. CWE-791
- CVE-2026-8740 A flaw has been found in Sanluan PublicCMS 5.202506.d. CWE-791
- CVE-2026-44232 DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF… CWE-791