high7.5
CVE-2024-46307
A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products.
Impact
A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sparkshop | Sparkshop | through 1.1.6 |