CVE-2021-47769: Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS)
Isshue Shopping Cart 3.5 contains a persistent cross-site scripting vulnerability in title input fields across stock, customer, and invoice modules. Attackers with privileged user accounts can inject malicious scripts that execute on preview, potentially enabling session hijacking and persistent phishing attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47769?
CVE-2021-47769 has a medium severity level due to the potential for persistent cross-site scripting attacks.
How do I fix CVE-2021-47769?
To mitigate CVE-2021-47769, validate and sanitize user inputs in the title fields across stock, customer, and invoice modules.
Who is affected by CVE-2021-47769?
CVE-2021-47769 affects Isshue Shopping Cart version 3.5 and potentially any custom implementations of this software.
What type of vulnerability is CVE-2021-47769?
CVE-2021-47769 is classified as a persistent cross-site scripting (XSS) vulnerability.
Can attackers exploit CVE-2021-47769 without proper user permissions?
No, attackers need privileged user accounts to exploit CVE-2021-47769 since the vulnerability occurs in sections requiring such permissions.