Vulnerabilities in shopizer-ecommerce

6 results

Vexday analysis

Shopizer-ecommerce apresenta 6 vulnerabilidades catalogadas, com 1 crítica e nenhuma sob exploração ativa conhecida. A fraqueza dominante é XSS (CWE-79), típica de plataformas web, sem novos problemas reportados nos últimos 90 dias, indicando risco estável e não imediato.

CVE-2022-23063HIGHShopizer - Insufficient Session ExpirationEPSS 1.2%CVE-2022-23061MEDIUMShopizer - IDOR delete superadminEPSS 1.1%CVE-2020-11007MEDIUMNegative charge in shopping cart possible in ShopizerEPSS 0.9%CVE-2020-11006CRITICALPotential remote code execution in ShopizerEPSS 0.6%CVE-2022-23060MEDIUMShopizer - Stored XSS in Manage FilesEPSS 0.6%CVE-2022-23059MEDIUMShopizer - Stored XSS in Manage ImagesEPSS 0.6%