En bref
- CVE-2021-33561 est une vulnérabilité MOYENNE (CVSS 4.8) touchant com.shopizer:shopizer, shopizer (shopizer).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.9%, plus élevée que 86.7% des vulnérabilités.
- Correctif : mettre à jour vers 2.17.0 ou plus récent.
Description
A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.
NVD description
A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.
Autres vulnérabilités de com.shopizer:shopizer
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free