CVE-2026-36766
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Apr 30, 2026
Vendor
unknown
Description
Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer v3.2.5 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the getInputStream() or getReader() functions.