Lucene search
China National Vulnerability DatabaseCNVD-2022-13187HistorySep 27, 2021 - 12:00 a.m.
Shopkit Cross-Site Scripting Vulnerability
2021-09-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
shopkit
cross-site scripting
vulnerability
kirby cms
integrated commerce
canadian personal developer
sam nabi
attackers
user credentials
email text field
EPSS
0.001
Percentile
37.3%
Shopkit is an open source Kirby Cms version 2 integrated commerce solution from the Canadian personal developer Sam Nabi.Shopkit version 2.7 contains a cross-site scripting vulnerability that could be exploited by attackers to hijack user credentials via a carefully crafted payload in an email text field.
Related
osv
osv
CVE-2020-20508
2021-09-24 22:15:08
cvelist
cvelist
CVE-2020-20508
2021-09-24 21:27:34
cve
cve
CVE-2020-20508
2021-09-24 22:15:08
prion
prion
Cross site scripting
2021-09-24 22:15:00
nvd
nvd
CVE-2020-20508
2021-09-24 22:15:08