CVE-2021-33561

A stored cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customername in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when informati...

PT-2021-20204

Name of the Vulnerable Software and Affected Versions Shopizer versions prior to 2.17.0 Description A stored cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the customer name variable in various forms of store administration. The injected code is...

CVE-2021-33561: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customername in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when informati...