What is CVE-2026-47743?

CVE-2026-47743 is a high-severity vulnerability in Shopperlabs Shopper, classified under Cross-site Scripting. CVSS score: 8.7/10. Published 2026-07-23.

How severe is CVE-2026-47743?

High severity. CVSS v3 base score is 8.7 out of 10.

XSS in Shopperlabs Shopper

CVE-2026-47743

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel expos…

Vulnerability class: XSS (Cross-Site Scripting)

CVSS v3 metric

CVSS v3 base score 8.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N.

Affected products

Shopperlabs Shopper — versions < 2.8.0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting
CWE-200 — Information Disclosure
CWE-639 — Authorization Bypass Through User-Controlled Key

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-47743?: CVE-2026-47743 is a high-severity vulnerability in Shopperlabs Shopper, classified under Cross-site Scripting. CVSS score: 8.7/10. Published 2026-07-23.
How severe is CVE-2026-47743?: High severity. CVSS v3 base score is 8.7 out of 10.