CVE-2026-3714— OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-3714
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template.php of the component Incomplete Fix CVE-2024-36694. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1336
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenCart 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenCart是中国OpenCart团队的一套开源的电子商务系统。该系统提供产品评论、产品评分、产品添加等模块。 OpenCart 4.0.2.3版本存在安全漏洞，该漏洞源于模板引擎特殊元素中和不当，可能导致远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | OpenCart | 4.0.2.3 | cpe:2.3:a:opencart:opencart:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-3714
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-3714
请登录查看更多情报信息。
- Google Drive: Sign-inbroken-link
- Submit #765176: OpenCart 4.1.0.3 Code Injection (CWE-94)third-party-advisory
- CVE-2026-3714 OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template enginevdb-entrytechnical-description
- https://nvd.nist.gov/vuln/detail/CVE-2026-3714
Same Patch Batch · n/a · 2026-03-08 · 10 CVEs total
| CVE-2026-3787 | 7.0 HIGH | UltraVNC Windows Service cryptbase.dll uncontrolled search path |
| CVE-2026-3789 | 6.3 MEDIUM | Bytedesk SpringAIGiteeRestController SpringAIGiteeRestService.java getModels server-side r |
| CVE-2026-3788 | 6.3 MEDIUM | Bytedesk SpringAIOpenrouterRestController SpringAIOpenrouterRestService.java getModels ser |
| CVE-2026-3786 | 6.3 MEDIUM | EasyCMS Request Parameter RbacuserAction.class.php sql injection |
| CVE-2026-3785 | 6.3 MEDIUM | EasyCMS Request Parameter RbacnodeAction.class.php sql injection |
| CVE-2026-3749 | 6.3 MEDIUM | Bytedesk SVG File UploadRestService.java handleFileUpload unrestricted upload |
| CVE-2026-3748 | 6.3 MEDIUM | Bytedesk SVG File UploadRestController.java uploadFile unrestricted upload |
| CVE-2026-3731 | 5.3 MEDIUM | libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds |
| CVE-2026-3750 | 4.7 MEDIUM | ContiNew Admin Storage Management S3ClientFactory.java URI.create server-side request forg |
IV. Related Vulnerabilities
Same product: OpenCart
- CVE-2021-47953
OpenCart 3.0.3.7 Cross-Site Request Forgery via account/pass - CVE-2021-47946
OpenCart 3.0.3.6 Account Takeover via Cross Site Request For - CVE-2021-47923
OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie - CVE-2026-5331
OpenCart Extension Installer installer.php path traversal - CVE-2025-15116
OpenCart Single-Use Coupon race condition
Same weakness: CWE-1336
- CVE-2026-44129
Server-side template injection - CVE-2026-44916
OpenStack Ironic 安全漏洞 - CVE-2026-42203
LiteLLM: Server-Side Template Injection in /prompts/test end - CVE-2026-6984
AstrBotDevs AstrBot Dashboard API t2i.py create_template spe - CVE-2026-34587
Kirby has Server-Side Template Injection (SSTI) via double t
V. Comments for CVE-2026-3714
No comments yet