https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-35362.htmlhttps://patchthecve.com/cve/CVE-2024-35362.htmlWed, 17 Jun 2026 07:34:49 +0000MEDIUM 5.4: Ecshop 3.6 is vulnerable to Cross Site Scripting (XSS) via ecshop/article_cat.php.https://patchthecve.com/cve/CVE-2024-1530.htmlhttps://patchthecve.com/cve/CVE-2024-1530.htmlWed, 17 Jun 2026 07:04:26 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in ECshop 4.1.8. Affected by this issue is some unknown functionality of the file /admin/view_sendlist.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public andhttps://patchthecve.com/cve/CVE-2023-5294.htmlhttps://patchthecve.com/cve/CVE-2023-5294.htmlWed, 17 Jun 2026 06:48:16 +0000MEDIUM 4.7: A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goods_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed tohttps://patchthecve.com/cve/CVE-2023-5293.htmlhttps://patchthecve.com/cve/CVE-2023-5293.htmlWed, 17 Jun 2026 06:48:16 +0000MEDIUM 4.7: A vulnerability, which was classified as critical, was found in ECshop 4.1.5. Affected is an unknown function of the file /admin/leancloud.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and mhttps://patchthecve.com/cve/CVE-2023-39112.htmlhttps://patchthecve.com/cve/CVE-2023-39112.htmlWed, 17 Jun 2026 06:11:35 +0000MEDIUM 6.5: ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel.