add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.
CVSS
7.5
EPSS
0%
KEV
No
Exploitation
unknown
CVE Published
9456d ago · NVD
Added to TCL Advisory
17d ago · TCL Advisory
NVD · Updated 1h ago