Approved changes feed: RSS · Atom

cpe:2.3:a:peel:peel_shopping:9.0.0:*:*:*:*:*:*:*

part: a version: 9.0.0 update: *

VendorPeel (7fd4f0f4-f4bb-56ff-8d66-d5f743247d42)
ProductPeel Shopping (81dd0ec4-e967-5070-b273-0b3254dc90d2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/advisto/peel-shopping purl2cpe 2026-06-01 10:16:30.184558

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20848 vulnerable 2026-06-08 05:11:28.158367 Details available
Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] parameter to the latter.
Published: 2019-06-30T18:15:23.000Z
Updated: 2024-08-05T12:12:29.390Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.