High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-02	CVE-2023-43835	Injection vulnerability in Superstorefinder Super Store Finder Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content. network low complexity superstorefinder CWE-74	8.8
2023-09-27	CVE-2023-44044	SQL Injection vulnerability in Superstorefinder Super Store Finder Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php. network low complexity superstorefinder CWE-89	7.2