Security Advisory

CVE-2021-25963

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-09-30 07:50:11

Last updated 2025-04-30 16:26:18

Assigner Mend

State PUBLISHED

Description

In Shuup, versions 1.6.0 through 2.10.8 are vulnerable to reflected Cross-Site Scripting (XSS) that allows execution of arbitrary javascript code on a victim browser. This vulnerability exists due to the error page contents not escaped.

← Browse all CVEs View on cve.org ↗