Read the docs

shuup

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

shuup records in CISA KEV

No shuup vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Shuup 2 records MEDIUM

Records

2 records

TI-2021-07969 CVE-2021-25963 · GHSA-5pcx-vqjp-p34w

Shuup - Reflected XSS in Error Page

Priority MEDIUM 60

In Shuup, versions 1.6.0 through 2.10.8 are vulnerable to reflected Cross-Site Scripting (XSS) that allows execution of arbitrary javascript code on a victim browser.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00955 Published 2021-09-30 Fixed in 2.11.0 CWE-79
TI-2021-07968 CVE-2021-25962 · GHSA-663j-rjcr-789f

Shuup - Formula Injection in Checkout Addresses

Priority MEDIUM 40

“Shuup” application in versions 0.4.2 to 2.10.8 is affected by the “Formula Injection” vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01094 Published 2021-09-29 Fixed in 2.11.0 CWE-1236
Open these records in search →