Peel SHOPPING 9.3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:peel:peel_shopping:9.3.0:*:*:*:*:*:*:*
part: a version: 9.3.0 update: *
| Vendor | Peel (7fd4f0f4-f4bb-56ff-8d66-d5f743247d42) |
|---|---|
| Product | Peel Shopping (81dd0ec4-e967-5070-b273-0b3254dc90d2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/advisto/peel-shopping |
purl2cpe | 2026-06-01 10:16:30.184562 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-47897 |
vulnerable | 2026-06-08 05:38:07.861027 |
PEEL Shopping 9.3.0 - 'address' Stored Cross-Site Scripting
HIGH (7.2)
PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the address parameter of the change_params.php script. Attackers can inject malicious JavaScript payloads that execute when users interact with the address text box, potentially enabling client-side script execution.
Published: 2026-01-23T16:47:40.896Z
Updated: 2026-03-05T01:29:09.947Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47892 |
vulnerable | 2026-06-08 05:38:07.855660 |
PEEL Shopping 9.3.0 - 'Comments/Special Instructions' Stored Cross-Site Scripting
HIGH (7.2)
PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the 'Comments / Special Instructions' parameter of the purchase page. Attackers can inject malicious JavaScript payloads that will execute when the page is refreshed, potentially allowing client-side script execution.
Published: 2026-01-23T16:47:37.388Z
Updated: 2026-03-05T01:29:09.119Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27190 |
vulnerable | 2026-06-08 05:30:46.036323 |
Details available
A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user supplied input containing polyglot payload is echoed back in javascript code in HTML response. This allows an attacker to input malicious JavaScript which can steal cookie, redirect them to other malicious website, etc.
Published: 2021-02-12T02:24:50.000Z
Updated: 2024-08-03T20:40:47.402Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.