CVE-2022-23059 Vulnerability in maven package com.shopizer:shopizer

Description

A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images” tab, which allows an attacker to upload a SVG file containing malicious JavaScript code.

Remediation

References

https://github.com/shopizer-ecommerce/shopizer/commit/6b9f1ecd303b3b724d96bd08095c1a751dcc287e

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23059

Related Vulnerabilities

CVE-2020-28477 Vulnerability in npm package immer

CVE-2023-48240 Vulnerability in maven package org.xwiki.platform:xwiki-platform-security-authentication-api

CVE-2019-20149 Vulnerability in maven package org.webjars.bowergithub.jonschlinkert:kind-of

CVE-2022-24760 Vulnerability in npm package parse-server

CVE-2023-36472 Vulnerability in npm package @strapi/utils

Severity

Medium

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N