CyberSecBulletin

Shopwind vulnerabilities

We track 1 vulnerability in Shopwind products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 21, 2024.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Shopwind vulnerabilities

  • 8.1 High severity

    Shopwind: Improper Control of Generation of Code

    CVE-2024-1705Shopwind

    A vulnerability was found in Shopwind up to 4.6. It has been rated as critical. This issue affects the function actionCreate of the file /public/install/controllers/DefaultController.php of the component Installation. The manipulation leads to code injection.