Vulnerability Description
A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template.php of the component Incomplete Fix CVE-2024-36694. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opencart | Opencart | 4.0.2.3 |
Related Weaknesses (CWE)
References
- https://drive.google.com/file/d/1_ZCvICLKo8AOovDkKFHwsBxh-ciwbElS/view?usp=drivePermissions Required
- https://vuldb.com/?ctiid.349659Permissions RequiredVDB Entry
- https://vuldb.com/?id.349659Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.765176Third Party AdvisoryVDB Entry
FAQ
What is CVE-2026-3714?
CVE-2026-3714 is a vulnerability with a CVSS score of 4.7 (MEDIUM). A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template.php of the component Incomplete Fix CVE-2024-36694. Such ma...
How severe is CVE-2026-3714?
CVE-2026-3714 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-3714?
Check the references section above for vendor advisories and patch information. Affected products include: Opencart Opencart.