Report

Shopello API <= 2.9.0 is vulnerable to Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated

Published
2021-04-15

Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

CVE

https://www.cve.org/CVERecord?id=CVE-2021-30134

CVSS

Score:7.4

Severity:High

Version: 2.9.0

The plugin vendor has not patched this vulnerability at the moment.