github.com
https://github.com/advisto/peel-shopping/issues/4 CVE-2021-27190
MEDIUM
Record summary
CVE-2021-27190 has a selected CVSS score of 5.4 (medium); EIP currently links 1 repository PoC.
Description
A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user supplied input containing polyglot payload is echoed back in javascript code in HTML response. This allows an attacker to input malicious JavaScript which can steal cookie, redirect them to other malicious website, etc.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
Proofs of concept
1Repository PoCs
GitHubanmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSSRepository PoCby anmolksachanStars: 3Not analyzed2 files
References
6github.com
https://github.com/anmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS github.com
https://github.com/vulf/Peel-Shopping-cart-9.4.0-Stored-XSS nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-27190 peel-shopping.com
https://www.peel-shopping.com/modules/telechargement/telecharger.php?id=7 secuneus.com
https://www.secuneus.com/cve-2021-27190-peel-shopping-ecommerce-shopping-cart-stored-cross-site-scripting-vulnerability-in-address