zen_cart vulnerabilities
CVEs whose affected-version data names the zen_cart package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-108829Medium· 4.7PoCA security flaw has been discovered in Zen Cart up to 2.2.2
A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configuration. The manipulation of the argument configuration results…
CVE-2026-108828Medium· 4.1PoCA vulnerability was identified in Zen Cart 2.2.2
A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The atta…
CVE-2026-108827Medium· 4.1PoCA vulnerability was determined in Zen Cart up to 2.2.2
A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/includes/functions/general.php of the component Administrative Module Management. Executing a manipulation of the argume…
CVE-2026-108826High· 7.3PoCA vulnerability was found in Zen Cart up to 2.2.2
A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txn_id result…