CVE-2024-28559

Niushop B2B2C versions 5.3.3 and earlier are vulnerable to an SQL injection (CWE-89) in the Goodsbatchset.php component. Specifically, the setPrice() function fails to properly neutralize special elements used in SQL commands, allowing an attacker to escalate privileges and potentially gain unaut...