VYPR

uBidAuction

by Apphp.com

CVEs (1)

  • CVE-2022-50963MedMay 10, 2026
    risk 0.40cvss 6.1epss 0.00

    uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module. The date_created, date_from, date_to, and created_at parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject…