CVE-2020-11006: Shopizer

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

In Shopizer before version 2.11.0, a script can be injected in various forms and saved in the database, then executed when information is fetched from backend. This has been patched in version 2.11.0.

Affected products

• Shopizer Shopizer: before 2.11.0 (fixed in 2.11.0)

Published 2020-05-08. Last modified 2026-06-17.