Approved changes feed: RSS · Atom

cpe:2.3:a:peel:peel_shopping:9.1.0:*:*:*:*:*:*:*

part: a version: 9.1.0 update: *

VendorPeel (7fd4f0f4-f4bb-56ff-8d66-d5f743247d42)
ProductPeel Shopping (81dd0ec4-e967-5070-b273-0b3254dc90d2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/advisto/peel-shopping purl2cpe 2026-06-01 10:16:30.184559

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000887 vulnerable 2026-06-08 05:10:26.189797 Details available
Peel shopping peel-shopping_9_1_0 version contains a Cross Site Scripting (XSS) vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account.
Published: 2018-12-27T18:00:00.000Z
Updated: 2024-09-17T02:06:43.562Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.