fecshop/yii2_fecshop
GitHub
Releases163
Frequency1 week 4 days
Last Release
Stars5.27K
yii2 ( PHP ) fecmall（fecshop） core code used for ecommerce shop 多语言多货币多入口的开源电商 B2C 商城，支持移动端vue, app, html5，微信小程序微店，微信小程序商城等
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 6.1 MEDIUM | 4.3 MEDIUM | ||
An issue was found in yii2_fecshop 2.x. There is a reflected XSS vulnerability in the check cart page. | |||
| 7.2 HIGH | 6.5 MEDIUM | ||
An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4. An attacker can bypass a front-end restriction and upload PHP code to the webserver, by providing image data and the image/jpeg content type, with a .php extension. This occurs because the code relies on the getimagesize function. | |||