PatchTheCVE: kashiparahttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-44653: Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.https://patchthecve.com/cve/CVE-2024-44653.htmlhttps://patchthecve.com/cve/CVE-2024-44653.htmlTue, 27 Oct 2026 18:10:00 +0000MEDIUM 6.5: Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.CVE-2024-46336: kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.phttps://patchthecve.com/cve/CVE-2024-46336.htmlhttps://patchthecve.com/cve/CVE-2024-46336.htmlTue, 27 Oct 2026 18:10:00 +0000MEDIUM 6.1: kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php.CVE-2024-46334: kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpahttps://patchthecve.com/cve/CVE-2024-46334.htmlhttps://patchthecve.com/cve/CVE-2024-46334.htmlTue, 27 Oct 2026 18:10:00 +0000MEDIUM 6.1: kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php.CVE-2024-44652: Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, uhttps://patchthecve.com/cve/CVE-2024-44652.htmlhttps://patchthecve.com/cve/CVE-2024-44652.htmlTue, 27 Oct 2026 18:10:00 +0000MEDIUM 6.5: Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php.