CriticalCVSS 9.8
EPSS 3.0%
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.