E-commerce Website Project E-commerce Website — known CVE vulnerabilities

Every CVE whose affected-product data names E-commerce Website Project E-commerce Website, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-25205 — CVSS 9.8 (critical): SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the…
• CVE-2021-25207 — CVSS 9.8 (critical): Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file…
• CVE-2021-25204 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script…
• CVE-2022-27330 — CVSS 5.4 (medium): A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows attackers to execute…