{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.0.2.3"}],"component":"opencart/opencart","cve_ids":["CVE-2024-36694"],"ecosystem":"Packagist","epss":0.00923,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xrh7-2gfq-4rcq","id":"tcs_01M5KFBA292G58VSYHYC7X4GQ7","modified_at":"2026-09-10T03:50:17.180233976Z","published_at":"2024-07-17T21:31:38Z","references":["https://osv.dev/vulnerability/GHSA-xrh7-2gfq-4rcq","https://nvd.nist.gov/vuln/detail/CVE-2024-36694","https://github.com/opencart/opencart/issues/13863","https://github.com/A3h1nt/CVEs/blob/main/OpenCart/Readme.md","https://github.com/opencart/opencart","https://github.com/opencart/opencart/releases/tag/4.0.2.3","https://medium.com/@pawarit.sanguanpang/opencart-v4-0-2-3-server-side-template-injection-0b173a3bdcf9"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-xrh7-2gfq-4rcq","url":"https://osv.dev/vulnerability/GHSA-xrh7-2gfq-4rcq"}],"summary":"openCart Server-Side Template Injection (SSTI) vulnerability"}