CriticalCVSS 9.8
EPSS 3.0%
FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter.