PT-2022-15819
CVE-2022-23059
·
تاريخ النشر
2022-03-29
·
تاريخ التحديث
2022-04-08
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Shopizer versions 2.0 through 2.17.0
Description
A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer via the “Manage Images” tab, which allows an attacker to upload a SVG file containing malicious JavaScript code.
Recommendations
For versions 2.0 through 2.17.0, consider disabling the image upload functionality in the "Manage Images" tab until a patch is available to prevent exploitation of the Stored Cross Site Scripting (XSS) vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾