Skip to content
OpenAdvisories

Vendor

PEEL eCommerce

2 known vulnerabilities.

Products

PEEL Shopping 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2021-47897

    PEEL Shopping 9.3.0 - 'address' Stored Cross-Site Scripting

    PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the address parameter of the change_params.php script. Attackers can inject malicious JavaScript payloads that execute when users interact with the address text box, potentially enabl…

    PEEL eCommerce PEEL Shopping
  • High 7.2
    CVE-2021-47892

    PEEL Shopping 9.3.0 - 'Comments/Special Instructions' Stored Cross-Site Scripting

    PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the 'Comments / Special Instructions' parameter of the purchase page. Attackers can inject malicious JavaScript payloads that will execute when the page is refreshed, potentially allo…

    PEEL eCommerce PEEL Shopping