critical9.8
CVE-2022-30454
Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product.
Impact
Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Merchandise Online Store Project | Merchandise Online Store | Version 1.0 |