Vulnerabilities in coreshop

3 results

CVE-2026-41249HIGHCoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` ConfigurationEPSS 0.4%CVE-2026-22242MEDIUMCoreShop Vulnerable to SQL Injection via Admin ReportsEPSS 0.4%CVE-2026-23959MEDIUMCoreShop Vulnerable to SQL Injection via Admin customer-company-modifierEPSS 0.4%