Kashipara Ecommerce Website version 1.0 contains a SQL Injection vulnerability in the recover_email parameter of the user_password_recover.php script. This flaw allows an unauthenticated attacker to inject malicious SQL code, potentially leading to unauthorized access or data leakage. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No patches or fixes have been identified or provided at this time.