https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-45990.htmlhttps://patchthecve.com/cve/CVE-2022-45990.htmlWed, 17 Jun 2026 05:11:06 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter.https://patchthecve.com/cve/CVE-2022-27357.htmlhttps://patchthecve.com/cve/CVE-2022-27357.htmlWed, 17 Jun 2026 04:36:57 +0000CRITICAL 9.8: Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.https://patchthecve.com/cve/CVE-2022-27346.htmlhttps://patchthecve.com/cve/CVE-2022-27346.htmlWed, 17 Jun 2026 04:36:56 +0000HIGH 8.8: Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.https://patchthecve.com/cve/CVE-2022-27436.htmlhttps://patchthecve.com/cve/CVE-2022-27436.htmlWed, 17 Jun 2026 04:37:02 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text field.https://patchthecve.com/cve/CVE-2022-27435.htmlhttps://patchthecve.com/cve/CVE-2022-27435.htmlWed, 17 Jun 2026 04:37:01 +0000HIGH 8.8: An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component.