PEEL eCommerce vulnerabilities

🔔 Create alert RSS

Published CVEs affecting PEEL eCommerce products: 2 record(s), with severity, exploitation and fixes.

PEEL Shopping 2

Exploited only (KEV) →

CVE-2021-47897 High · 7.2 CWE-79 Jan 23, 2026

PEEL Shopping 9.3.0 - 'address' Stored Cross-Site Scripting

PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the address parameter of the change_params.php script. Attackers can inject malicious JavaScript payloads that execute when users interact with the address text box, potentially enabling client-side script execution.

CVE-2021-47892 High · 7.2 CWE-79 Jan 23, 2026

PEEL Shopping 9.3.0 - 'Comments/Special Instructions' Stored Cross-Site Scripting

PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the 'Comments / Special Instructions' parameter of the purchase page. Attackers can inject malicious JavaScript payloads that will execute when the page is refreshed, potentially allowing client-side script execution.