CVE-2022-23061

概要

参考情報

• shopizer-ecommerce/shopizer commit 6b9f1ec · Patch
• whitesourcesoftware.com/vulnerability-database/CVE-2022-23061 · Exploit

shopizer のその他の脆弱性

• CVE-2025-51605高 8.1An issue was discovered in Shopizer 3.2.7. The server's CORS implementation reflects the client-supplied Origin header verbatim into Access-…
• CVE-2022-23063高 8.8In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an…
• CVE-2022-23060中 4.8A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user (attacker) can inj…
• CVE-2022-23059中 4.8A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images” tab, which allows a…
• CVE-2021-33562中 4.8A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTM…