CVE-2021-43679: Shopex Ecshop

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

ecshop v2.7.3 is affected by a SQL injection vulnerability in shopex\ecshop\upload\api\client\api.php.

Affected products

• Shopex Ecshop: version 2.7.3 only

Published 2021-12-02. Last modified 2026-06-17.