Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Razinsoft Clear all filters
TI-2026-45055 CVE-2026-63106 · GHSA-r3fx-hv2g-j24q

ReadyEcommerce < 4.5.2 Unauthenticated SQL Injection via ProductController.php

Priority MEDIUM 49

ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause wit…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00496 Published 2026-08-10 Fixed in 4.5.2 CWE-89
TI-2026-45054 CVE-2026-63105 · GHSA-hf9m-85m8-5qmr

ReadyEcommerce < 4.5.2 Stored XSS via Chat and Support Ticket Systems

Priority LOW 23

ReadyEcommerce before 4.5.2 contains a stored cross-site scripting (XSS) vulnerability that allows authenticated customers to inject malicious HTML payloads through the chat and support ticket messaging systems by exploi…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-08-10 Fixed in 4.5.2 CWE-79