Vulnerabilities in omnishop

2 results
CVE-2025-6215MEDIUMOmnishop <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST EndpointEPSS 0.3%CVE-2025-6214MEDIUMOmnishop <= 1.0.9 - Cross-Site Request Forgery to Arbitrary User Deletion via /users/delete REST EndpointEPSS 0.2%