CVE-2026-39250

An authorization vulnerability exists in Innoshop 0.6.0. After logging into the frontend, an attacker can directly access backend application interfaces, leading to further dangerous operations...

EUVD-2024-53560

Malicious code in bioql PyPI...

CVE-2024-57277

InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting XSS via SVG file upload...

PT-2025-3425

Name of the Vulnerable Software and Affected Versions InnoShop versions 0.3.8 and below Description The issue concerns Cross Site Scripting XSS via SVG file upload. This means an attacker could potentially inject malicious scripts into the system by uploading specially crafted SVG files, leading ...