Cross-site scripting in Shopizer

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-33561 · ADVISORY
• shopizer-ecommerce/shopizer commit 197f8c7 · WEB
• shopizer-ecommerce/shopizer · WEB
• exploit-db.com/exploits/49901 · WEB

com.shopizer:shopizer のその他の脆弱性

• CVE-2026-36766中 5.4Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer v3.2.5 allows attack…
• CVE-2026-36767緊急 10.0A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeabl…
• CVE-2022-23059中 4.8A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images” tab, which allows a…
• CVE-2021-33562中 4.8A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTM…