Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-36766
5.4
MEDIUMCVSS v3
Published
April 30, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer v3.2.5 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the getInputStream() or getReader() functions.
GitHub