CVE-2026-115450 | MarcosCamara01 Ecommerce Template Checkout Flow /api/user/cart variantId/stripeId external control of assumed-immutable web parameter

October 22, 2026 Yanac

A vulnerability classified as problematic has been found in MarcosCamara01 Ecommerce Template. This issue affects some unknown processing of the file /api/user/cart of the component Checkout Flow. Performing a manipulation of the argument variantId/stripeId results in external control of assumed-immutable web parameter.

This vulnerability is cataloged as CVE-2026-115450. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More