Package · Packagist

jsdecena/laracom

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.1

CVE-2022-0472

Unrestricted Upload of File with Dangerous Type in jsdecena/laracom

Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9.

jsdecena jsdecena/laracom jsdecena/laracom Packagist

Feb 4, 2022
Medium 6.1

CVE-2019-15489

laracom Cross-site Scripting

laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has search?q= XSS.

jsdecena/laracom Packagist

Aug 26, 2019