Oretnom23 Simple Subscription Website — known CVE vulnerabilities

Every CVE whose affected-product data names Oretnom23 Simple Subscription Website, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2022-26283 — CVSS 9.8 (critical): Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the view_plan endpoint…
• CVE-2021-43140 — CVSS 9.8 (critical): SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login.
• CVE-2024-3014 — CVSS 6.3 (medium): A vulnerability classified as critical has been found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of…
• CVE-2024-4093 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown…
• CVE-2024-3015 — CVSS 6.3 (medium): A vulnerability classified as critical was found in SourceCodester Simple Subscription Website 1.0. Affected by this vulnerability is an…
• CVE-2024-3042 — CVSS 6.3 (medium): A vulnerability was found in SourceCodester Simple Subscription Website 1.0 and classified as critical. This issue affects some unknown…
• CVE-2021-43141 — CVSS 6.1 (medium): Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application.