Executive Summary

Informations
Name CVE-2022-23059 First vendor Publication 2022-03-29
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:S/C:N/I:P/A:N)
Cvss Base Score 3.5 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Medium
Cvss Expoit Score 6.8 Authentication Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images†tab, which allows an attacker to upload a SVG file containing malicious JavaScript code.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23059

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1

Sources (Detail)

https://github.com/shopizer-ecommerce/shopizer/commit/6b9f1ecd303b3b724d96bd0...
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23059
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
Date Informations
2024-11-28 14:07:02
  • Multiple Updates
2022-04-08 17:22:56
  • Multiple Updates
2022-04-06 21:22:56
  • Multiple Updates
2022-04-04 17:22:52
  • Multiple Updates
2022-03-29 17:22:51
  • First insertion