CVE-2022-23059

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-23059
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23059.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-23059
Aliases
Published
2022-03-29T11:15:07Z
Modified
2025-01-15T02:17:00.255406Z
Summary
[none]
Details

A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images” tab, which allows an attacker to upload a SVG file containing malicious JavaScript code.

References

Affected packages

Git / github.com/shopizer-ecommerce/shopizer

Affected ranges

Type
GIT
Repo
https://github.com/shopizer-ecommerce/shopizer
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed

Affected versions

2.*

2.13.0
2.14.1
2.15.0
2.16.0
2.17.0

v2.*

v2.13.0
v2.14.0
v2.14.1