CNNVD-202601-3968 Information
Jan 23, 2026
cve
CNNVD ID
CNNVD-202601-3968
Related CVE
- CNNVD Published: 2026-01-23
Description (Chinese)
PEEL Shopping是法国PEEL公司的一个电子商务平台。 PEEL Shopping 9.3.0版本存在安全漏洞，该漏洞源于对change_params.php脚本中address参数的清理不当，可能导致存储型跨站脚本攻击。
Description (English)
PEEL Shoping is an e-commerce platform of PeEL France. There is a security loophole in version 9.3.0 of PEEL Shopping, which stems from the inappropriate clean-up of the coders parameters in the Change params.php script, which could lead to a storage-type cross-station script attack.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
PEEL
Published
2026-01-23
Last Modified
2026-02-24
References
https://www.peel.fr/ https://web.archive.org/web/20210302174407/ https://www.exploit-db.com/exploits/49553 https://www.vulncheck.com/advisories/peel-shopping-address-stored-cross-site-scripting
Share on: