CVE-2026-3714 - OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in...

CVE-2026-3714 - OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in...

CVE ID :CVE-2026-3714 Published : March 8, 2026, 7:16 a.m. | 26 minutes ago Description :A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template.php of the component Incomplete Fix CVE-2024-36694. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 5.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
March 8, 2026
Affected Product: php