CVE-2018-1000887

Peel shopping peel-shopping910 version contains a Cross Site Scripting XSS vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account...

Cross site scripting

Peel shopping peel-shopping910 version contains a Cross Site Scripting XSS vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account...

Peel-shopping Cross-Site Scripting Vulnerability

Peel shopping is an open source e-commerce solution. A cross-site scripting vulnerability exists in Peel shopping peel-shopping910 version. A remote attacker can exploit this vulnerability by accessing an administrative account and injecting JavaScript code into the 'Site Name EN' parameter...

PT-2018-9603

Name of the Vulnerable Software and Affected Versions: peel-shopping 9 1 0 version Description: The issue allows an authenticated user to inject java script code in the Site Name EN parameter, resulting in a Cross Site Scripting XSS issue. This can be exploited if the malicious user has access to...

CVE-2018-1000887: Improper Neutralization of Input During Web Page Generation

Peel shopping peel-shopping910 version contains a Cross Site Scripting XSS vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account...