Advisories · Technology

SourceCodester SUP Online Shopping.

Every CVE that names SourceCodester SUP Online Shopping among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-9377 CVE record

CVSS 4.8 Medium

SourceCodester SUP Online Shopping productedit.php cross site scripting
- SourceCodester SUP Online Shopping
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 24 May 2026
CVE-2026-8131 CVE record

CVSS 6.9 Medium

SourceCodester SUP Online Shopping replymsg.php sql injection
- SourceCodester SUP Online Shopping
- Other injection
- SQL injection
Not analysed yet 8 May 2026
CVE-2026-8130 CVE record

CVSS 6.9 Medium

SourceCodester SUP Online Shopping message.php sql injection
- SourceCodester SUP Online Shopping
- Other injection
- SQL injection
Not analysed yet 8 May 2026
CVE-2026-8129 CVE record

CVSS 6.9 Medium

SourceCodester SUP Online Shopping wishlist.php sql injection
- SourceCodester SUP Online Shopping
- Other injection
- SQL injection
Not analysed yet 8 May 2026
CVE-2026-8128 CVE record

CVSS 6.9 Medium

SourceCodester SUP Online Shopping viewmsg.php sql injection
- SourceCodester SUP Online Shopping
- Other injection
- SQL injection
Not analysed yet 8 May 2026