CVE-2022-30059: Shopwind

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php.

Affected products

• Shopwind Shopwind: up to and including 3.4.2

Published 2022-05-11. Last modified 2026-06-17.