Browse CVEs

HIGH 8.1 CVE-2024-1705 A vulnerability was found in Shopwind up to 4.6. It has been rated as critical. This issue affects the function actionCreate of the file /public/inst… Shopwind after 4.6 Fix from $1,9502024-02-21 MEDIUM 6.1 CVE-2022-43321 Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common/library/Page.php. Shopwind No fix yet Fix from $1,6002022-11-09 CRITICAL 9.8 CVE-2022-30453EPSS 16% ShopWind <= 3.4.2 has a RCE vulnerability in Database.php Shopwind after 3.4.2 Fix from $2,3002022-05-11 HIGH 7.2 CVE-2022-30452 ShopWind <= v3.4.2 has a Sql injection vulnerability in Database.php Shopwind after 3.4.2 Fix from $1,9502022-05-11 MEDIUM 6.5 CVE-2022-30059 Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php. Shopwind after 3.4.2 Fix from $1,6002022-05-11 MEDIUM 5.4 CVE-2022-30057 Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability. Shopwind after 3.4.2 Fix from $1,6002022-05-11 MEDIUM 5.3 CVE-2022-30058 Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \backend\controllers\DbController.ph… Shopwind after 3.4.2 Fix from $1,6002022-05-11