Approved changes feed: RSS · Atom
cpe:2.3:a:shopizer-ecommerce:shopizer:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Shopizer Ecommerce (b5ed8271-3c1c-57f0-8e66-2794c9ca4673) |
|---|---|
| Product | Shopizer (fe5d66de-9f1c-55de-8b1f-ae7f8594b3ca) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23063 |
vulnerable | 2026-06-08 05:40:56.122836 |
Shopizer - Insufficient Session Expiration
HIGH (8.8)
In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
Published: 2022-05-03T08:55:09.569Z
Updated: 2024-09-16T19:09:20.842Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23061 |
vulnerable | 2026-06-08 05:40:56.122288 |
Shopizer - IDOR delete superadmin
MEDIUM (6.5)
In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecure Direct Object Reference (IDOR) vulnerability.
Published: 2022-05-01T12:40:12.050Z
Updated: 2024-09-17T02:05:46.247Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23060 |
vulnerable | 2026-06-08 05:40:56.121876 |
Shopizer - Stored XSS in Manage Files
MEDIUM (4.8)
A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user (attacker) can inject malicious JavaScript in the filename under the “Manage files” tab
Published: 2022-05-01T12:40:10.482Z
Updated: 2024-09-16T17:17:57.190Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23059 |
vulnerable | 2026-06-08 05:40:56.120177 |
Shopizer - Stored XSS in Manage Images
MEDIUM (4.8)
A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images” tab, which allows an attacker to upload a SVG file containing malicious JavaScript code.
Published: 2022-03-29T10:25:09.479Z
Updated: 2024-09-16T23:10:36.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11007 |
vulnerable | 2026-06-08 05:16:36.199706 |
Negative charge in shopping cart possible in Shopizer
MEDIUM (6.5)
In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. This vulnerability makes it possible to create a negative total in the shopping cart. This has been patched in version 2.11.0.
Published: 2020-04-16T18:20:12.000Z
Updated: 2024-08-04T11:21:14.408Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11006 |
vulnerable | 2026-06-08 05:16:36.198466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.