Bundle Product vulnerabilities

1 known vulnerability in Bundle Product from Webkul. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Bundle Product: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-51210Jan 23, 2024WebkulEPSS 1.09%

  SQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute arbitrary code via the id_product parameters in the UpdateProductQuantity function.