Question 1

What is CVE-2026-3319 — CVE-2026-3319?

Accepted Answer

Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /collection/. Exploitation of this vulnerability would allow an attacker to execute arbitrary JavaScript code.

Question 2

What is the authoritative source for CVE-2026-3319?

Accepted Answer

CVE-2026-3319 (CVE-2026-3319) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.32% probability of exploitation · percentile 24.6% · 2026-10-27T12:03:15Z
Last modified	2026-10-26

CVE-2026-3319CVE-2026-3319

Description

Scoring