InnoShop vulnerabilities
We track 2 vulnerabilities in InnoShop products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 23, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest InnoShop vulnerabilities
- 7.4 High severity
InnoShop: Relative Path Traversal
Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints. An authenticated attacker with access to the admin panel could abuse this to: (1) fully map the filesystem structure via the /api/file_manager/files?base_folder= endpoint, (2) cre
- 9.9 Critical severity
InnoShop: Unprotected Alternate Channel
In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted file and then renaming it to have a .php extension by using the Rename Function. Th