| Package | Affected versions | Patched versions |
|---|---|---|
| shopizer | ≤ 1.1.5 |
Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantity parameter, which causes the price of the item to be subtracted from the total cost.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free