critical9.8
CVE-2022-30395
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart.
Impact
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Merchandise Online Store Project | Merchandise Online Store | Version 1.0 |