CVE-2021-46447

A cross-site scripting XSS vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module...

CVE-2021-46447

CVE-2021-46447 affects H.H.G Multistore (v5.1.0 and below). The vulnerability is a cross-site scripting (XSS) flaw exploitable via a crafted payload inserted into the State parameter under the Address Book module, enabling execution of arbitrary web scripts/HTML. The provided sources describe the...

CVE-2021-46446

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=adminaccessgroupedit&aagID...

CVE-2021-46446

CVE-2021-46446 affects H.H.G Multistore v5.1.0 and below, with a SQL injection vulnerability exposed via /admin/admin.php?module=admin_access_group_edit&aagID. Root cause: injectable SQL parameter in admin_access_group_edit handler. Impact (per sources): high/critical across confidentiality, inte...

CVE-2021-46445

CVE-2021-46445 affects H.H.G Multistore v5.1.0 and below. A SQL injection vulnerability exists in /admin/categories.php?box_group_id, enabling injection through the specified parameter. The entry is corroborated by multiple sources (NVD/CVE lists) and situates the impact as disclosed, with CVSS c...

CVE-2021-46444

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admingroupedit&agID...

CVE-2021-46444

H.H.G Multistore (v5.1.0 and below) is affected by a SQL injection in the admin panel via /admin/admin.php?module=admin_group_edit&agID. The issue arises from improper input handling in that endpoint, enabling attackers to manipulate queries. CVSS data indicates high impact (C/I/A high with CVSS3...