MultiVendorX
MultiVendorX
Developer
4.2.42
Latest version
3,000
Installations
No date
Last updated
Vulnerability history
0 present
23 patched
12 Mitigation rules
- Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion vulnerability<= 4.2.2231/12/2025
- Broken Access Control vulnerability<= 4.2.2312/06/2025
- Sensitive Data Exposure Vulnerability<= 4.2.2204/06/2025
- Cross Site Scripting (XSS) Vulnerability<= 4.2.2219/05/2025
- Missing Authorization to Unauthenticated Table Rates Deletion vulnerability<= 4.2.1904/04/2025
- Unauthenticated Limited Local File Inclusion vulnerability<= 4.2.1431/01/2025
- Cross Site Scripting (XSS) vulnerability<= 4.2.1324/01/2025
- Cross-Site Request Forgery to Vendor Updates vulnerability<= 4.2.423/10/2024
- Missing Authorization to Forged Vendor Profile Deletion Email Sending vulnerability<= 4.2.423/10/2024
- Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover vulnerability<= 4.2.004/09/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 4.1.1709/08/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter vulnerability<= 4.1.1106/06/2024
- Broken Access Control vulnerability<= 4.1.305/04/2024
- Cross Site Scripting (XSS) vulnerability<= 4.1.328/03/2024
- Broken Access Control vulnerability<= 4.0.2531/01/2024
- Broken Access Control vulnerability<= 4.0.2326/12/2023
- Unauthenticated Local File Inclusion (LFI) vulnerability<= 3.8.11.815/08/2022
- Reflected Cross-Site Scripting vulnerability<= 3.8.11.815/08/2022
- Unauthorized AJAX Calls Vulnerability<= 3.8.11.815/08/2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 3.8.406/12/2021
- Cross-Site Request Forgery (CSRF) vulnerability<= 3.7.308/06/2021
- Unauthenticated Arbitrary Product Comment Posting vulnerability<= 3.7.326/05/2021
- Cross-Site Request Forgery (CSRF) vulnerability<= 3.5.716/09/2020