Skip to content
OpenAdvisories

Vendor

shuup

2 known vulnerabilities.

Products

shuup 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2021-25962

    Shuup - Formula Injection in Checkout Addresses

    “Shuup” application in versions 0.4.2 to 2.10.8 is affected by the “Formula Injection” vulnerability. A customer can inject payloads in the name input field in the billing address while buying a product. When a store administrator accesses the reports page to…

    shuup shuup shuup PyPI