CVE-2021-47909: Techraft Digital Multivendor Marketplace Online Store

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Mult-E-Cart Ultimate 2.4 contains multiple SQL injection vulnerabilities in inventory, customer, vendor, and order modules. Remote attackers with privileged vendor or admin roles can exploit the 'id' parameter to execute malicious SQL commands and compromise the database management system.

Affected products

• Techraft Digital Multivendor Marketplace Online Store: version 2.4 only

Published 2026-02-01. Last modified 2026-06-17.