CVE-2026-3319 — Multiple vulnerabilities in Cradle e-commerce
Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoin…
Published: 2026-05-11 · CVSS: 5.1 · CVSS 4.0
Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /collection/. Exploitation of this vulnerability would allow an attacker to execute arbitrary JavaScript code.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7