Approved changes feed: RSS · Atom

cpe:2.3:a:peel_ecommerce:peel_shopping:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPeel Ecommerce (04f28c86-f7f5-56b5-875c-42ce51f1dfbb)
ProductPeel Shopping (fc802e5f-b756-547a-aaa2-f35d23ae9aa0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47897 vulnerable 2026-06-08 05:38:07.860989 PEEL Shopping 9.3.0 - 'address' Stored Cross-Site Scripting
HIGH (7.2)
PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the address parameter of the change_params.php script. Attackers can inject malicious JavaScript payloads that execute when users interact with the address text box, potentially enabling client-side script execution.
Published: 2026-01-23T16:47:40.896Z
Updated: 2026-03-05T01:29:09.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47892 vulnerable 2026-06-08 05:38:07.854959 PEEL Shopping 9.3.0 - 'Comments/Special Instructions' Stored Cross-Site Scripting
HIGH (7.2)
PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the 'Comments / Special Instructions' parameter of the purchase page. Attackers can inject malicious JavaScript payloads that will execute when the page is refreshed, potentially allowing client-side script execution.
Published: 2026-01-23T16:47:37.388Z
Updated: 2026-03-05T01:29:09.119Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.