| Package | Affected versions | Patched versions |
|---|---|---|
| ecw-shop | = 6.0.2 |
ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free