Evershopcommerce Evershop vulnerabilities
- evershopcommerce evershopEverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API6.9 Medium
- evershopcommerce evershopEverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover9.3 Critical
- evershopEverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response9.8 Critical
- evershopEverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys9.3 Critical
- evershopEverShop Order Order.resolvers.js resource injection6.3 Medium