Laravel powered e-commerce
v1.5.0
Unrestricted Upload of File with Dangerous Type in jsdecena/laracom
jsdecena/laracom prior to version 2.0.9 is vulnerable to Unrestricted Upload of File with Dangerous Type.
Affected versions
v1.0.0
v1.0.1
v1.0.2
v1.0.3
v1.0.4
v1.1.0
v1.1.1
v1.2.0
v1.2.1
v1.2.10
v1.2.11
v1.2.12
v1.2.2
v1.2.3
v1.2.4
v1.2.5
v1.2.6
v1.2.7
v1.2.8
v1.2.9
v1.3.0
v1.3.1
v1.3.2
v1.3.3
v1.3.4
v1.4.0
v1.4.1
v1.4.10
v1.4.11
v1.4.2
v1.4.3
v1.4.4
v1.4.5
v1.4.6
v1.4.7
v1.4.8
v1.4.9
Fixed in
2.0.9
References
Updated Nov 08, 2023 · Source: OSV.dev
Dependencies (17)
+ 9 more
laracom Cross-site Scripting
laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has a Cross-site Scripting vulnerability via search query.
1.4.11
1.5.0
Updated Apr 23, 2024 · Source: OSV.dev
Dependencies (16)
+ 8 more
Dependencies (15)
+ 7 more
Dependencies (14)
+ 6 more
Dependencies (13)
+ 5 more
Dependencies (12)
+ 4 more
Dependencies (11)
+ 3 more
Dependencies (10)
+ 2 more
Dependencies (9)
+ 1 more
Dependencies (6)