Search for packages
| purl | pkg:maven/com.shopizer/shopizer@2.16.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 8.6 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-378p-hrq3-x4p3
Aliases: CVE-2021-33562 |
Cross-site scripting in Shopizer A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary … | There are no reported fixed by versions. |
|
GHSA-rcp4-jm2v-mr3f
Aliases: CVE-2021-33561 |
Cross-site scripting in Shopizer A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary … | There are no reported fixed by versions. |
|
GHSA-p2j7-6g9h-32xh
Aliases: CVE-2022-23059 |
Cross site scripting in Shopizer A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions v2.0.2 through v2.17.0 via … | There are no reported fixed by versions. |
|
GHSA-f5w4-7ccj-5m75
Aliases: CVE-2026-36767 |
Shopizer has a path traversal issue A path traversal vulnerability in the /content/images/add endpoint of shopizer through version 3.2.5 allows … | There are no reported fixed by versions. |
|
GHSA-fqcw-2xhj-p63g
Aliases: CVE-2026-36766 |
Shopizer is vulnerable to Cross-site Scripting Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer through version … | There are no reported fixed by versions. |
|
CVE-2021-33562
|
Cross-site Scripting A reflected cross-site scripting (XSS) vulnerability in Shopizer allows remote attackers to inject arbitrary web script or HTML … | There are no reported fixed by versions. |
|
CVE-2022-23063
|
In Shopizer versions 2.3.0 to 3.0.1 is vulnerable to Insufficient Session Expiration. When a password has been changed by the … | There are no reported fixed by versions. |
|
CVE-2021-33561
|
Cross-site Scripting A stored cross-site scripting (XSS) vulnerability in Shopizer allows remote attackers to inject arbitrary web script or HTML … | There are no reported fixed by versions. |
|
CVE-2022-23061
|
Authorization Bypass Through User-Controlled Key In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although … | There are no reported fixed by versions. |
|
CVE-2022-23059
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer … | There are no reported fixed by versions. |
|
CVE-2022-23060
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer … | There are no reported fixed by versions. |