Skip to content
OpenAdvisories

Vendor

evershopcommerce

4 known vulnerabilities.

Products

evershop 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-25993 Public exploit

    EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys

    EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / request_path values—derived from the url_key stored in the database—into SQL statements via string concatenation and passes th…

    evershopcommerce evershop