CVE-2026-116745 | QloApps up to 1.7.0 OrderConfirmationController init id_cart information disclosure

SecurityVulns
Yanac

A vulnerability described as problematic has been identified in QloApps up to 1.7.0. This issue affects the function OrderConfirmationController::init of the component OrderConfirmationController. Such manipulation of the argument id_cart leads to information disclosure.

This vulnerability is traded as CVE-2026-116745. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More