CVE-2022-23060

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-23060
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23060.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-23060
Published
2022-05-01T13:15:07Z
Modified
2025-01-15T02:16:56.270274Z
Summary
[none]
Details

A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user (attacker) can inject malicious JavaScript in the filename under the “Manage files” tab

References

Affected packages

Git / github.com/shopizer-ecommerce/shopizer

Affected ranges

Type
GIT
Repo
https://github.com/shopizer-ecommerce/shopizer
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed

Affected versions

2.*

2.13.0
2.14.1
2.15.0
2.16.0
2.17.0

v2.*

v2.13.0
v2.14.0
v2.14.1