CVE-2026-115453 is a high-severity vulnerability in the Ecommerce Template by MarcosCamara01. An authenticated user can delete and modify cart and wishlist rows of other users due to unscoped primary key queries in the cart and wishlist repositories. This issue arises because the repositories use primary key queries without considering the owning user, and PostgreSQL row-level security policies do not app [truncated]
Price manipulation vulnerability in Ecommerce Template allows authenticated users to be charged for one product while ordering another due to independent handling of variantId and stripeId in the cart and checkout flow. This flaw can lead to financial loss and reputational damage. Defenders should prioritize verification and remediation to mitigate these risks. The vulnerability has a high CVSS score, emp [truncated]
