Vendors / InnoShop Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now InnoShop records in CISA KEV No InnoShop vulnerabilities are listed in CISA KEV.
Priority MEDIUM 62
Innoshop through 0.4.1 allows Insecure Direct Object Reference (IDOR) at multiple places within the frontend shop.
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00299 · Published 2025-06-23 · No fix listed CWE-425
Priority MEDIUM 44
In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted file and then renaming it to have a .php ex…
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00537 · Published 2025-06-23 · No fix listed CWE-420
Priority LOW 33
Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints.
CVSS 3.1 HIGH 7.4· Network · Low privileges · No interaction · EPSS 0.00465 · Published 2025-06-23 · No fix listed CWE-23
Open these records in search → All records by CVSS severity
1 1 1 0 0
