| Package | Affected versions | Patched versions |
|---|---|---|
| com.shopizer:shopizer | ≤ 2.16.0 |
Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer through version 3.2.5 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the getInputStream() or getReader() functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free