A vulnerability was found in evershopcommerce evershop up to 2.1.0 and classified as critical. This affects the function execute. The manipulation results in sql injection.

This vulnerability is reported as CVE-2026-25993. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.