SMS Abandoned Cart Recovery ✦ CartBoss, CVE-2025-31865

CVE, Research URL: CVE-2025-31865
Home page URL: Security reports for SMS Abandoned Cart Recovery ✦ CartBoss
Application: SMS Abandoned Cart Recovery ✦ CartBoss
Published on: Apr 01, 2025
Research Description: Missing Authorization vulnerability in CartBoss SMS Abandoned Cart Recovery ✦ CartBoss allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SMS Abandoned Cart Recovery ✦ CartBoss: from n/a through 4.1.2.
Affected versions: Min -, max 4.1.2.
Status: vulnerable