CVE-2024-9149: Wind Media E-Commerce Website Template

High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5.

Affected products

• Wind Media E-Commerce Website Template: before v1.5 (fixed in v1.5)

Published 2025-03-04. Last modified 2026-06-17.