Vendor
Fecshop
Products
2
CVEs
2
Across products
2
Status
Private
Products
2- 1 CVE
- 1 CVE
Recent CVEs
2| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-17188 | Hig | 0.47 | 7.2 | 0.01 | Oct 4, 2019 | An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4. An attacker can bypass a front-end restriction and upload PHP code to the webserver, by providing image data and the image/jpeg content type, with a .php… | ||
| CVE-2020-22808 | Med | 0.00 | 6.1 | 0.01 | Apr 29, 2021 | An issue was found in yii2_fecshop 2.x. There is a reflected XSS vulnerability in the check cart page. |
- risk 0.47cvss 7.2epss 0.01
An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4. An attacker can bypass a front-end restriction and upload PHP code to the webserver, by providing image data and the image/jpeg content type, with a .php…
- risk 0.00cvss 6.1epss 0.01
An issue was found in yii2_fecshop 2.x. There is a reflected XSS vulnerability in the check cart page.