https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:40:20.073023+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-38076 cnvd-2021-38076 2026-10-08T06:40:20.142003+00:00 cnvd-2021-38076 https://cve.radiocsirt.org/vuln/euvd-2026-28473 EUVD-2026-28473 2026-10-08T06:40:20.142044+00:00 EUVD-2026-28473 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33561 fkie_cve-2021-33561 2026-10-08T06:40:20.142059+00:00

A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.

 https://cve.radiocsirt.org/vuln/ghsa-rcp4-jm2v-mr3f GHSA-rcp4-jm2v-mr3f — Cross-site scripting in Shopizer 2026-10-08T06:40:20.142090+00:00

Affected: Maven: com.shopizer:shopizer

A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.

 https://cve.radiocsirt.org/vuln/gsd-2021-33561 gsd-2021-33561 2026-10-08T06:40:20.142115+00:00 gsd-2021-33561