CVE-2026-108826 in Zen Cart
Prediction
by VulDB Data Team • 10/11/2026
A vulnerability was found in <a href="/product/zen_cart">Zen Cart up to 2.2.2</a>. This impacts the function <code>zen_db_perform</code> in the library <em>includes/modules/payment/paypaldp.php</em> of the component <em>PayPal IPN Handler</em>. Performing a manipulation of the argument <em>txn_id</em> results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named <em>557154f4fa025f51553094f47b06aa024220c48f</em>. It is suggested to install a patch to address this issue.
If you want to get best quality of vulnerability data, you may have to visit VulDB.