Cross site scripting

A reflected cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL...

Shopizer 2.16.0 Cross Site Scripting

Exploit Title: Shopizer alert1 and save it 4. Open "Customers" - XSS payload will trigger Reflected XSS - 'ref' parameter Description: A reflected cross-site scripting XSS vulnerability in Shopizer before version 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the 'ref'...