critical9.8
CVE-2022-30386
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.
Impact
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Merchandise Online Store Project | Merchandise Online Store | Version 1.0 |