PT-2026-4513 · Unknown · Peel Shopping

CVE-2021-47897 · Publicado 2026-01-23 · Atualizado 2026-01-24

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PEEL Shopping version 9.3.0

Description The software contains a stored cross-site scripting issue in the address parameter of the ''change params.php'' script. Attackers can inject malicious JavaScript payloads that execute when users interact with the address text box, potentially enabling client-side script execution. The vulnerable parameter is address.

Recommendations Apply updates to address the issue in the ''change params.php'' script. As a temporary workaround, sanitize user input for the address parameter to prevent the injection of malicious scripts.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2021-47897

Produtos afetados

Peel Shopping

Referências · 6

• 🔥 https://exploit-db.com/exploits/49553 · Exploit
• https://twitter.com/CVEnew/status/2014995834010759275 · Publicação no Twitter
• https://t.me/CVEtracker/42861 · Publicação no Telegram
• https://vulncheck.com/advisories/peel-shopping-address-stored-cross-site-scripting · Nota
• https://web.archive.org/web/20210302174407/https://peel.fr · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-47897 · Nota de Segurança