Sourcecodester Sup Online Shopping vulnerabilities

5 CVEs affecting Sourcecodester Sup Online Shopping, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9377, published 2026-05-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-8131, published 2026-05-08. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impacts an unknown function of the file /admin/replymsg.php. The manipulation of the argument msgid results in sql…
CVE-2026-8130, published 2026-05-08. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to sql…
CVE-2026-8129, published 2026-05-08. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file wishlist.php. Executing a manipulation of the argument delwlistid can…
CVE-2026-8128, published 2026-05-08. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element is an unknown function of the file /admin/viewmsg.php. Performing a manipulation of the argument msgid…
CVE-2026-9377, published 2026-05-24. Low severity, CVSS 2.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file /admin/productedit.php. The manipulation of the argument productName…