CVE-2021-25963

CVE-2021-25963 affects Shuup versions 1.6.0–2.10.8, with a reflected Cross-Site Scripting (XSS) flaw caused by unescaped error page content. Impact is arbitrary JavaScript execution in a victim’s browser. CVSS metrics provided (2.0/3.1) indicate MEDIUM severity (base scores 4.3 and 6.1, respectiv...

CVE-2021-25963 Shuup - Reflected XSS in Error Page

In Shuup, versions 1.6.0 through 2.10.8 are vulnerable to reflected Cross-Site Scripting XSS that allows execution of arbitrary javascript code on a victim browser. This vulnerability exists due to the error page contents not escaped...