A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 up to and including 2.17.0, where a privileged user (attacker) can inject malicious JavaScript in the filename under the “Manage files” tab
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
shopizer shopizer |