| Package | Affected versions | Patched versions |
|---|---|---|
| shopkit | = 2.7 |
Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component, which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free