CVE-2026-115450

Name of the Vulnerable Software and Affected Versions MarcosCamara01 Ecommerce Template (affected versions not specified)

Description An issue in the cart and checkout flow allows an authenticated user to be charged for one product while ordering another. The endpoint 'POST /api/user/cart' accepts variantId and stripeId as independent request body fields without verifying if the stripeId belongs to the specified variantId. Subsequently, the 'POST /api/stripe/payment' endpoint uses the stored stripeId to determine the charge amount. Finally, the checkout.session.completed webhook creates the order based on the variantId, resulting in orders for expensive items at the price of the cheapest item in the catalogue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.