Advisto PEEL SHOPPING 跨站脚本漏洞

漏洞信息详情

Advisto PEEL SHOPPING是一套基于PHP和MySQL的开源电子商务系统。

Advisto PEEL SHOPPING 中存在跨站脚本漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://www.peel-shopping.com/modules/telechargement/telecharger.php?id=7

来源:MISC

链接:https://www.secuneus.com/cve-2021-27190-peel-shopping-ecommerce-shopping-cart-stored-cross-site-scripting-vulnerability-in-address/

来源:MISC

链接:https://github.com/anmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS

来源:MISC

链接:https://github.com/advisto/peel-shopping/issues/4#issuecomment-953461611

来源:MISC

链接:https://github.com/vulf/Peel-Shopping-cart-9.4.0-Stored-XSS

来源:MISC

链接:https://www.peel-shopping.com/modules/telechargement/telecharger.php?id=7

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-27190

暂无