Code-Projects Online Shopping System vulnerabilities

10 CVEs affecting Code-Projects Online Shopping System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-85643, published 2026-09-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-82700, published 2026-08-31. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription.…
CVE-2026-79793, published 2026-08-25. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumit_form.php. Such manipulation of the…
CVE-2026-19998, published 2026-08-17. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to…
CVE-2026-82701, published 2026-08-31. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This…
CVE-2026-19919, published 2026-08-16. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results…
CVE-2026-85643, published 2026-09-04. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli_query of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql…
CVE-2026-19922, published 2026-08-16. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /checkout.php. Performing a manipulation of the…
CVE-2026-19923, published 2026-08-16. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout_process.php. Executing a manipulation of the argument total_count can…
CVE-2026-19921, published 2026-08-16. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument…
CVE-2026-19920, published 2026-08-16. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It…