Filtered by vendor Shopkit Project Subscriptions
Filtered by product Shopkit Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-20508 1 Shopkit Project 1 Shopkit 2024-11-21 6.1 Medium
Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component, which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field.
CVE-2023-45854 1 Shopkit Project 1 Shopkit 2024-09-20 7.5 High
A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd parameter in the add-to-cart function.