CVE-2021-27190

2021-02-1202:24:50

mitre

www.cve.org

peel shopping

xss

vulnerability

polyglot payload

javascript

html response

attack

cookie stealing

malicious website

EPSS

0.001

Percentile

48.8%

JSON

A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user supplied input containing polyglot payload is echoed back in javascript code in HTML response. This allows an attacker to input malicious JavaScript which can steal cookie, redirect them to other malicious website, etc.