Mao-Qi

**Name of the Vulnerable Software and Affected Versions** Helmet Store Showroom Site version 1.0 **Description** The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `id` parameter at the "/hss/classes/Users.php?f=delete" API endpoint. **Recommendations** For Helmet Store Showroom Site version 1.0, consider restricting access to the `/hss/classes/Users.php?f=delete` API endpoint to minimize the risk of exploitation. Avoid using the `id` parameter in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.