Skip to content
OpenAdvisories

Package · Maven

com.shopizer:shopizer

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Critical 10.0
    CVE-2026-36767

    Shopizer has a path traversal issue

    A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.

    com.shopizer:shopizer Maven
  • Medium 5.4
    CVE-2026-36766

    Shopizer is vulnerable to Cross-site Scripting

    Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer v3.2.5 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the getInputStream() or getReader() f…

    com.shopizer:shopizer Maven
  • Medium 4.8
    CVE-2022-23059

    Shopizer - Stored XSS in Manage Images

    A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images” tab, which allows an attacker to upload a SVG file containing malicious JavaScript code.

    shopizer-ecommerce Shopizer com.shopizer:shopizer Maven
  • Medium 4.8
    CVE-2021-33561 Public exploit

    Cross-site scripting in Shopizer

    A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any us…

    com.shopizer:shopizer Maven
  • Medium 4.8
    CVE-2021-33562 Public exploit

    Cross-site scripting in Shopizer

    A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL.

    com.shopizer:shopizer Maven