CVE-2026-36766 in shopizerИнформация

Сводка

по MITRE • 30.04.2026

Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer v3.2.5 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the getInputStream() or getReader() functions.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

MITRE

Резервировать

06.04.2026

Раскрытие

30.04.2026

Модерация

принято

Вход

VDB-360355

EPSS

0.00034

KEV

Нет

Деятельности

Очень низкий

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-36766
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-36766
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-36766/

◂ ПредыдущийОбзорДалее ▸

Want to know what is going to be exploited?

We predict KEV entries!