Skip to content
OpenAdvisories
High · 8.6 CVE-2024-9149 EUVD-2024-54124GHSA-8ggp-3pgj-q2gm

SQLi in Wind Media's E-Commerce Website Template

Published Mar 4, 2025 · Updated Jun 2, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wind Media E-Commerce Website Template allows SQL Injection.

This issue affects E-Commerce Website Template: before v1.5.

Affected products

VendorProductAffectedFixed
Wind Media E-Commerce Website Template < v1.5 v1.5

References