Read the docs

Razinsoft

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Razinsoft records in CISA KEV

No Razinsoft vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-45055 CVE-2026-63106 · GHSA-r3fx-hv2g-j24q

ReadyEcommerce < 4.5.2 Unauthenticated SQL Injection via ProductController.php

Priority MEDIUM 49

ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause wit…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00496 Published 2026-08-10 Fixed in 4.5.2 CWE-89
TI-2026-45054 CVE-2026-63105 · GHSA-hf9m-85m8-5qmr

ReadyEcommerce < 4.5.2 Stored XSS via Chat and Support Ticket Systems

Priority LOW 23

ReadyEcommerce before 4.5.2 contains a stored cross-site scripting (XSS) vulnerability that allows authenticated customers to inject malicious HTML payloads through the chat and support ticket messaging systems by exploi…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-08-10 Fixed in 4.5.2 CWE-79
Open these records in search →