Description
A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user (attacker) can inject malicious JavaScript in the filename under the “Manage files” tab
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| shopizer-ecommerce | Shopizer | 2.0 – < unspecified, unspecified – ≤ 2.17.0 | unspecified |