PT-2026-64032
CVE-2026-65761
·
Published
2026-07-23
·
Updated
2026-08-26
Description by
CVSS 4.0
9.3
CriticalMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Easy Store versions 1.0.0 through 2.0.1
Description
Improper validation of order parameters allows an unauthenticated SQL injection, which is a technique used to manipulate database queries. This issue enables full read access to the database, including sensitive information such as credentials and sessions.
Recommendations
Update Easy Store to a version later than 2.0.1.
Found an issue in the description? Have something to add? Feel free to write us 👾