Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/29 6:0 p.m.43 views

CVE-2026-47742 Shopper: Missing authorization on Product admin Livewire sub-form components

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Sub-form Livewire components used in the product editor Edit, Inventory, Seo, Shipping, Files had no authorization on their store method. Any authenticated panel user, regardless of role, could mutate any product's pricing, stock, SEO...

6.5CVSS0.00221EPSS
SaveExploits0References2
Rows per page
Query Builder