Vulnerabilities > Ecommerce Website Project > Ecommerce Website > 1.0

DATE	CVE	VULNERABILITY TITLE	RISK
2022-12-05	CVE-2022-45990	Cross-site Scripting vulnerability in Ecommerce-Website Project Ecommerce-Website 1.0 A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter. network low complexity ecommerce-website-project CWE-79	6.1
2022-04-08	CVE-2022-27357	Unrestricted Upload of File with Dangerous Type vulnerability in Ecommerce-Website Project Ecommerce-Website 1.0 Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php. network low complexity ecommerce-website-project CWE-434 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.