Priority MEDIUM 57
A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00519 · Published 2024-07-05 · No fix listed CWE-79
Priority HIGH 82
An issue in Ecommerce-CodeIgniter-Bootstrap commit v.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01673 · Published 2024-04-29 · No fix listed CWE-94
Priority HIGH 82
An issue in Ecommerce-CodeIgniter-Bootstrap commit v.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01919 · Published 2024-04-29 · No fix listed CWE-94
Priority HIGH 68
SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01075 · Published 2024-04-29 · No fix listed CWE-89
Priority HIGH 82
An issue in Ecommerce-CodeIgniter-Bootstrap commit v.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01919 · Published 2024-04-29 · No fix listed CWE-89
Priority MEDIUM 60
Cross Site Scripting (XSS) vulnerability in Ecommerce-CodeIgniter-Bootstrap thru commit d5904379ca55014c5df34c67deda982c73dc7fe5 (on Dec 27, 2022), allows attackers to execute arbitrary code via the languages and trans_l…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00634 · Published 2023-01-20 · No fix listed CWE-79
Priority LOW 28
Ecommerce-CodeIgniter-Bootstrap before commit 56465f was discovered to contain a cross-site scripting (XSS) vulnerability via the function base_url() at /blog/blogpublish.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00619 · Published 2022-08-18 · No fix listed CWE-79
Priority LOW 29
Cross-site scripting (XSS) vulnerability in application/modules/admin/views/ecommerce/products.php in Ecommerce-CodeIgniter-Bootstrap (Codeigniter 3.1.11, Bootstrap 3.3.7) allows remote attackers to inject arbitrary web…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00838 · Published 2021-10-01 · No fix listed CWE-79
Priority LOW 28
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/advanced_settings/adminUsers.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00679 · Published 2020-09-03 · No fix listed CWE-79
Priority LOW 28
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/advanced_settings/languages.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00679 · Published 2020-09-03 · No fix listed CWE-79
Priority LOW 28
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/blog/blogpublish.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00679 · Published 2020-09-03 · No fix listed CWE-79
Priority LOW 28
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/discounts.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00679 · Published 2020-09-03 · No fix listed CWE-79
Priority LOW 28
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/publish.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00679 · Published 2020-09-03 · No fix listed CWE-79
Priority LOW 28
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/vendor/views/add_product.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00679 · Published 2020-09-03 · No fix listed CWE-79
Priority LOW 28
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in _parts/header.php, within application/views/templates/clothesshop, application/views/templates/greenlabel, and application/views/templates/redlabel.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00679 · Published 2020-09-03 · No fix listed CWE-79
Priority LOW 28
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in blog.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00679 · Published 2020-09-03 · No fix listed CWE-79
THREATIST.IORead the docs