Known vulnerabilities in Simple and Nice Shopping Cart Script
Vendor:
sourcecodester
Software:
Simple and Nice Shopping Cart Script
Software CPE:
cpe:2.3:a:sourcecodester:simple_and_nice_shopping_cart_script:*:*:*:*:*:*:*:*
Website:
https://www.sourcecodester.com/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU66831 - Unrestricted Upload of File with Dangerous Type CVE-2022-2909 |
CWE-434 | Medium | - | 30.08.2022 |
SB2022083012 |
||
| #VU66830 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-2957 |
CWE-89 | Medium | - | 30.08.2022 |
SB2022083012 |
||
| #VU66687 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-2814 |
CWE-79 | Low | - | 22.08.2022 |
SB2022082215 |