CVE-2026-115453 | MarcosCamara01 Ecommerce Template Cart Repository/Wishlist Repository repositories authorization

October 22, 2026 Yanac

A vulnerability marked as problematic has been reported in MarcosCamara01 Ecommerce Template. This affects the function cartRepository.delete/cartRepository.updateQuantityInternal/wishlistRepository.delete of the file src/lib/db/drizzle/repositories of the component Cart Repository/Wishlist Repository. This manipulation causes authorization bypass.

This vulnerability is tracked as CVE-2026-115453. The attack is possible to be carried out remotely. No exploit exists.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More