Skip to content
OpenAdvisories

Product · evershopcommerce

evershop

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-25993 Public exploit

    EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys

    EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / request_path values—derived from the url_key stored in the database—into SQL statements via string concatenation and passes th…

    evershopcommerce evershop