Cpe:2.3:a:evershop:evershop:*:*:*:*:*:*:*:*

EverShop versions prior to 2.2.1 contain a missing authorization vulnerability in the customer address API, allowing unauthenticated attackers to manipulate other users' shipping addresses if the customer and address UUIDs are known.