cve/2021/CVE-2021-25963.md
2025-09-29 21:09:30 +02:00

777 B

CVE-2021-25963

Description

In Shuup, versions 1.6.0 through 2.10.8 are vulnerable to reflected Cross-Site Scripting (XSS) that allows execution of arbitrary javascript code on a victim browser. This vulnerability exists due to the error page contents not escaped.

POC

Reference

Github

No PoCs found on GitHub currently.