CVE-2026-39428 | Cubecart up to 6.5.x cross site scripting (GHSA-gvxc-5v7r-272m)

A vulnerability was found in Cubecart up to 6.5.x. It has been classified as problematic. Impacted is an unknown function. Performing a manipulation results in cross site scripting.

This vulnerability was named CVE-2026-39428. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More