CVE-2021-33561

A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in…

published May 24, 2021

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02850 · 86.6th percentile
Published
2021-05-24T22:33Z
EPSS history
Timeline
  • 24 MAY 22:33Z
    A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in…
    cvelistv5