CVE-2024-9149

CVE-2024-9149 describes an SQL injection vulnerability in Wind Media E-Commerce Website Template, affecting versions before v1.5. The issue arises from improper neutralization of special elements in SQL commands within the template’s code. Practical impact as stated: high confidentiality impact a...