VULNERABILITY INTELLIGENCE

CVE-2020-18164

CVSS score9.8 CRITICAL

EPSS probability1.13%

CISA KEVNot currently listed

Published2021-08-17

Last modified2026-06-17

Description

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.