CVE-2022-34989: Fruits Bazar Project Fruits Bazar

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email parameter at user_password_recover.php.

Affected products

• Fruits Bazar Project Fruits Bazar: version 1.0 only

Published 2022-07-26. Last modified 2026-06-17.