Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 09:16:12 +0000 cnvd-2021-38076 https://cve.radiocsirt.org/vuln/cnvd-2021-38076 cnvd-2021-38076 https://cve.radiocsirt.org/vuln/cnvd-2021-38076 EUVD-2026-28473 https://cve.radiocsirt.org/vuln/euvd-2026-28473 EUVD-2026-28473 https://cve.radiocsirt.org/vuln/euvd-2026-28473 fkie_cve-2021-33561 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33561 <p>A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.</p> <p>A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-33561 GHSA-rcp4-jm2v-mr3f — Cross-site scripting in Shopizer https://cve.radiocsirt.org/vuln/ghsa-rcp4-jm2v-mr3f <p><strong>Affected:</strong> Maven: com.shopizer:shopizer</p> <p>A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.</p> <p><strong>Affected:</strong> Maven: com.shopizer:shopizer</p> <p>A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.</p> https://cve.radiocsirt.org/vuln/ghsa-rcp4-jm2v-mr3f gsd-2021-33561 https://cve.radiocsirt.org/vuln/gsd-2021-33561 gsd-2021-33561 https://cve.radiocsirt.org/vuln/gsd-2021-33561