CVE-2018-1000887

Peel shopping peel-shopping910 version contains a Cross Site Scripting XSS vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account...

CVE-2018-1000887

Cross-site scripting vulnerability in Peel-shopping peel-shopping_9_1_0 allows an authenticated administrator to inject JavaScript via the Site Name EN parameter. Impact and exploitation details are as stated; no patch/version fixes are specified in the provided documents.

CVE-2018-1000887

Peel shopping peel-shopping910 version contains a Cross Site Scripting XSS vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account...