Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password in user editing page. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.7 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-23797 In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password in user editing page. The vendor was notified… https://www.cve.org/CVERecord?id=CVE-2026-23797
Post summary
Quick.Cart stores user passwords in plaintext, allowing high-privilege attackers to view them via the user editing page. The vendor has been notified and a CVE record is available.
CVE-2026-23797 Quick.Cart Privilege Escalation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23797
Post summary
The text references CVE‑2026‑23797 for Quick.Cart privilege escalation and links to a vulnerability page, but does not provide PoC, exploit code, patch, or active exploitation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opensolution | quick.cart | 6.7 | - | - |