01 Record

CVE-2025-15671

Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter

MediumPUBLISHEDCNA: WPScan

Base score5.4 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

02 Description

Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter

Published

2026-08-21 06:00Z19 HR AGO

Last updated

2026-08-21 12:50Z12 HR AGO

Reserved

2026-07-17

Assigning CNA

WPScan

Record state

PUBLISHED

Severity

Medium (CVSS 5.4)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weaknesses

SSVC decision

ExploitationnoneAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

42fe4ad840aec20ee07ae433b326f2a7aa646f091f83bae5696fe882549360d5

VendorProductVersionsPlatforms

UnknownWelcart e-Commerce0 to < 2.12.1—