critical9.8
CVE-2021-46446
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_access_group_edit&aagID.
Impact
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_access_group_edit&aagID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hhg-Multistore | Multistore | through 5.1.0 Version 4.10.3 |