Vulnerabilities > Cosmetics AND Beauty Product Online Store Project

DATE CVE VULNERABILITY TITLE RISK
2022-03-02 CVE-2022-25395 Cross-site Scripting vulnerability in Cosmetics and Beauty Product Online Store Project Cosmetics and Beauty Product Online Store 1.0
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting (XSS) attacks via the search parameter under the /cbpos/ app.
4.3
2022-03-02 CVE-2022-25396 SQL Injection vulnerability in Cosmetics and Beauty Product Online Store Project Cosmetics and Beauty Product Online Store 1.0
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection vulnerability via the search parameter.
7.5