1 matches found
CVE-2021-33561: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customername in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when informati...
4.8CVSS5.8AI score0.0285EPSS
SaveExploits2References2
20