Description

PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the 'Comments / Special Instructions' parameter of the purchase page. Attackers can inject malicious JavaScript payloads that will execute when the page is refreshed, potentially allowing client-side script execution.

INFO

Published Date :

2026-01-23T16:47:37.388Z

Last Modified :

2026-03-05T01:29:09.119Z

Source :

VulnCheck
AFFECTED PRODUCTS

The following products are affected by CVE-2021-47892 vulnerability.

Vendors Products
Peel
  • Peel Shopping

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact