Shopizer-Ecommerce
6 CVEs across 1 Shopizer-Ecommerce products. Browse Shopizer-Ecommerce vulnerabilities, severities, and proof-of-concept exploits.
Shopizer-Ecommerce products with known CVEs
Shopizer-Ecommerce CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2022-23063 | High | 8.8 | 2022-05-03 | In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a u… |
CVE-2022-23061 | Medium | 6.5 | 2022-05-01 | In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecur… |
CVE-2022-23060 | Medium | 4.8 | 2022-05-01 | A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user (attacker) can inject malicious JavaS… |
CVE-2022-23059 | Medium | 4.8 | 2022-03-29 | A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images” tab, which allows an attacker to uploa… |
CVE-2020-11006 | Critical | 9.1 | 2020-05-08 | In Shopizer before version 2.11.0, a script can be injected in various forms and saved in the database, then executed when information is fetched from backend… |
CVE-2020-11007 | Medium | 6.5 | 2020-04-16 | In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart… |