← Back

Shipstation

shipstation

Vendor: Shipstation • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-9009
1Shipstation
1Shipstation
Jun 17, 2026
Apr 11, 2023
N/A· v4
3.7 LOW· v3
N/A· v2
The ShipStation.com plugin 1.1 and earlier for CS-Cart allows remote attackers to insert arbitrary information into the database (via action=shipnotify) because access to this endpoint is completely unchecked. The attack...Show more
The ShipStation.com plugin 1.1 and earlier for CS-Cart allows remote attackers to insert arbitrary information into the database (via action=shipnotify) because access to this endpoint is completely unchecked. The attacker must guess an order number.Show less
CVE-2020-8889
1Shipstation
1Shipstation
Jun 17, 2026
Mar 28, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information (via action=export) because a typo results in a successful comparison of a blank password and NULL.