{"action":"Upgrade com.shopizer:shopizer to 2.17.0 or later.","affected":[{"fixed":"2.17.0","introduced":"0"}],"component":"com.shopizer:shopizer","cve_ids":["CVE-2021-33561"],"ecosystem":"Maven","epss":0.0285,"exploited":false,"fixed_versions":["2.17.0"],"ghsa_id":"GHSA-rcp4-jm2v-mr3f","id":"tcs_01M5N9BK2B2X5CM1G2VF1CWH4T","modified_at":"2023-11-08T04:06:05.319391Z","published_at":"2021-06-08T23:10:24Z","references":["https://osv.dev/vulnerability/GHSA-rcp4-jm2v-mr3f","https://nvd.nist.gov/vuln/detail/CVE-2021-33561","https://github.com/shopizer-ecommerce/shopizer/commit/197f8c78c8f673b957e41ca2c823afc654c19271","https://github.com/shopizer-ecommerce/shopizer/compare/2.16.0...2.17.0","https://www.exploit-db.com/exploits/49901"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-rcp4-jm2v-mr3f","url":"https://osv.dev/vulnerability/GHSA-rcp4-jm2v-mr3f"}],"summary":"Cross-site scripting in Shopizer"}