Threats tagged 'ghsa-qhv3-37x7-hpc6'

A vulnerability in innocommerce InnoShop up to version 0.7.8 affects the InstallServiceProvider::boot function in the Installation Endpoint component. This flaw allows improper authentication, enabling remote exploitation. Public exploit code has been disclosed. The issue is identified by CVE-2026-7630 and has a high severity rating with a CVSS score of 7.3. A patch exists, referenced by commit 45758e4ec22451ab944ae2ae826b1e70f6450dc9, and applying it is recommended to remediate the vulnerability.